Action not permitted
Modal body text goes here.
Modal Title
Modal Body
cve-2011-1929
Vulnerability from cvelistv5
Published
2011-05-24 23:00
Modified
2024-08-06 22:46
Severity ?
EPSS score ?
Summary
lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\0' characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T22:46:00.589Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "FEDORA-2011-7612",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061384.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://hg.dovecot.org/dovecot-1.1/rev/3698dfe0f21c"
},
{
"name": "44771",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/44771"
},
{
"name": "[dovecot] 20110511 v1.2.17 released",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://dovecot.org/pipermail/dovecot/2011-May/059086.html"
},
{
"name": "DSA-2252",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2011/dsa-2252"
},
{
"name": "MDVSA-2011:101",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:101"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.dovecot.org/doc/NEWS-2.0"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=706286"
},
{
"name": "[dovecot] 20110511 v2.0.13 released",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://dovecot.org/pipermail/dovecot/2011-May/059085.html"
},
{
"name": "RHSA-2011:1187",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2011-1187.html"
},
{
"name": "FEDORA-2011-7268",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060825.html"
},
{
"name": "72495",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/72495"
},
{
"name": "dovecot-header-name-dos(67589)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67589"
},
{
"name": "openSUSE-SU-2011:0540",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "https://hermes.opensuse.org/messages/8581790"
},
{
"name": "47930",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/47930"
},
{
"name": "[oss-security] 20110519 Re: Dovecot releases",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://openwall.com/lists/oss-security/2011/05/19/6"
},
{
"name": "44756",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/44756"
},
{
"name": "44827",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/44827"
},
{
"name": "FEDORA-2011-7258",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060815.html"
},
{
"name": "44683",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/44683"
},
{
"name": "44712",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/44712"
},
{
"name": "USN-1143-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-1143-1"
},
{
"name": "[oss-security] 20110519 Re: Dovecot releases",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://openwall.com/lists/oss-security/2011/05/19/3"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.dovecot.org/doc/NEWS-1.2"
},
{
"name": "[oss-security] 20110518 Dovecot releases",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://openwall.com/lists/oss-security/2011/05/18/4"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2011-05-11T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle \u0027\\0\u0027 characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-16T14:57:01",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "FEDORA-2011-7612",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061384.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://hg.dovecot.org/dovecot-1.1/rev/3698dfe0f21c"
},
{
"name": "44771",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/44771"
},
{
"name": "[dovecot] 20110511 v1.2.17 released",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://dovecot.org/pipermail/dovecot/2011-May/059086.html"
},
{
"name": "DSA-2252",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2011/dsa-2252"
},
{
"name": "MDVSA-2011:101",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:101"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.dovecot.org/doc/NEWS-2.0"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=706286"
},
{
"name": "[dovecot] 20110511 v2.0.13 released",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://dovecot.org/pipermail/dovecot/2011-May/059085.html"
},
{
"name": "RHSA-2011:1187",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2011-1187.html"
},
{
"name": "FEDORA-2011-7268",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060825.html"
},
{
"name": "72495",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/72495"
},
{
"name": "dovecot-header-name-dos(67589)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67589"
},
{
"name": "openSUSE-SU-2011:0540",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "https://hermes.opensuse.org/messages/8581790"
},
{
"name": "47930",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/47930"
},
{
"name": "[oss-security] 20110519 Re: Dovecot releases",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://openwall.com/lists/oss-security/2011/05/19/6"
},
{
"name": "44756",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/44756"
},
{
"name": "44827",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/44827"
},
{
"name": "FEDORA-2011-7258",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060815.html"
},
{
"name": "44683",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/44683"
},
{
"name": "44712",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/44712"
},
{
"name": "USN-1143-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-1143-1"
},
{
"name": "[oss-security] 20110519 Re: Dovecot releases",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://openwall.com/lists/oss-security/2011/05/19/3"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.dovecot.org/doc/NEWS-1.2"
},
{
"name": "[oss-security] 20110518 Dovecot releases",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://openwall.com/lists/oss-security/2011/05/18/4"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2011-1929",
"datePublished": "2011-05-24T23:00:00",
"dateReserved": "2011-05-09T00:00:00",
"dateUpdated": "2024-08-06T22:46:00.589Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2011-1929\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2011-05-24T23:55:04.387\",\"lastModified\":\"2024-11-21T01:27:19.797\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle \u0027\\\\0\u0027 characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message.\"},{\"lang\":\"es\",\"value\":\"lib-mail/message-header-parser.c en Dovecot v1.2.x antes de v1.2.17 y v2.0.x antes de v2.0.13 no controla correctamente los caracteres \u0027\\\\ 0 \u0027 en los nombres de cabecera, lo que permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda del demonio o la corrupci\u00f3n de buz\u00f3n) a trav\u00e9s de un mensaje de e-mail manipulado.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:P\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:1.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD2D1C99-0594-4378-AA6C-EC2E890E41FA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:1.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"96F35305-79B4-49CD-A89F-A559CA9EEB33\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:1.2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EDC7E277-A5AE-4025-8412-E715D1C8C0F9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:1.2.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0DBE1D51-B9D5-4E59-81F6-C6937DA78637\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:1.2.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"30B37ACE-64EA-49E7-B836-C3F05CAE0392\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:1.2.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1204F5C2-916D-4C27-A5C4-5B5E0AAA7322\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:1.2.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A0C46C8A-EA49-4356-BA6B-8EC0F2E70B3B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:1.2.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"96F54038-B17B-40C0-9C2E-20AF55E7602B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:1.2.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BBB0B72A-1C7D-4F89-BE89-CD82F667CB76\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:1.2.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FEF89EB6-CBF5-48DF-8FDD-2C0AE0266B3D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:1.2.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"41B2B3D8-EB69-4BD8-ACD5-CB6BFDE6B2FB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:1.2.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E1A909DC-0D77-4690-87D2-51A7564B63B8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:1.2.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BB2F767F-5D7F-40AC-BA57-4E819F486301\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:1.2.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"68296C7C-B72C-46E7-A280-5E86E1470FDC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:1.2.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"72E1AF54-0446-49FB-A6B8-AF14833A3D0C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:1.2.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CCD9422B-D205-4ADD-BF43-08483C353A41\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:1.2.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E15A372-9DEA-45F5-A8BC-E73C5CEA64DC\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:2.0:beta1:*:*:*:*:*:*\",\"matchCriteriaId\":\"3DDF90CB-3787-4872-B292-CE12FB6D62EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:2.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AEE31582-7AE3-4131-BDE9-5654DE58FAF3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:2.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"65102391-C9AF-4CA3-AC43-0C52A7A37363\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:2.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"593DF083-5960-4BD5-AFC4-668B30E32E59\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:2.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4DCC5E56-D31E-45F0-B18B-D98C219DEBAA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:2.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D969ED92-F429-4F67-8366-31A73CEE6A47\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:2.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8D4074C5-98E7-4A65-9413-17081FE12F0E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:2.0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"810788F1-D928-4190-94F9-944AF677C9BF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:2.0.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD6739FA-5AFE-46E9-AFB6-147736A81A86\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:2.0.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D486B62-AEB1-448E-88B9-267A1E1405A8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:2.0.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"062E0A90-0C22-4E5F-8D12-B3A17EE87789\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:2.0.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C9DCBDC9-B290-4495-8D15-C0E9AD595291\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:2.0.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E7574EAB-5E97-4906-9D7E-33654BFAEC6C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dovecot:dovecot:2.0.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F575E273-7FF6-44A0-A217-7A7544ED8061\"}]}]}],\"references\":[{\"url\":\"http://dovecot.org/pipermail/dovecot/2011-May/059085.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\"]},{\"url\":\"http://dovecot.org/pipermail/dovecot/2011-May/059086.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\"]},{\"url\":\"http://hg.dovecot.org/dovecot-1.1/rev/3698dfe0f21c\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\"]},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061384.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060815.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060825.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://openwall.com/lists/oss-security/2011/05/18/4\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\"]},{\"url\":\"http://openwall.com/lists/oss-security/2011/05/19/3\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\"]},{\"url\":\"http://openwall.com/lists/oss-security/2011/05/19/6\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\"]},{\"url\":\"http://osvdb.org/72495\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/44683\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/44712\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/44756\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/44771\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/44827\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.debian.org/security/2011/dsa-2252\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.dovecot.org/doc/NEWS-1.2\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.dovecot.org/doc/NEWS-2.0\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2011:101\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2011-1187.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/bid/47930\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.ubuntu.com/usn/USN-1143-1\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=706286\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/67589\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://hermes.opensuse.org/messages/8581790\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://dovecot.org/pipermail/dovecot/2011-May/059085.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://dovecot.org/pipermail/dovecot/2011-May/059086.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://hg.dovecot.org/dovecot-1.1/rev/3698dfe0f21c\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061384.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060815.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060825.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://openwall.com/lists/oss-security/2011/05/18/4\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://openwall.com/lists/oss-security/2011/05/19/3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://openwall.com/lists/oss-security/2011/05/19/6\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://osvdb.org/72495\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/44683\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/44712\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/44756\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/44771\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/44827\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2011/dsa-2252\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.dovecot.org/doc/NEWS-1.2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.dovecot.org/doc/NEWS-2.0\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2011:101\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2011-1187.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/47930\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/USN-1143-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=706286\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/67589\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://hermes.opensuse.org/messages/8581790\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
ghsa-8hm3-4p5h-mv6g
Vulnerability from github
Published
2022-05-17 01:59
Modified
2022-05-17 01:59
Details
lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\0' characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message.
{
"affected": [],
"aliases": [
"CVE-2011-1929"
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2011-05-24T23:55:00Z",
"severity": "MODERATE"
},
"details": "lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle \u0027\\0\u0027 characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message.",
"id": "GHSA-8hm3-4p5h-mv6g",
"modified": "2022-05-17T01:59:31Z",
"published": "2022-05-17T01:59:31Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1929"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=706286"
},
{
"type": "WEB",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67589"
},
{
"type": "WEB",
"url": "https://hermes.opensuse.org/messages/8581790"
},
{
"type": "WEB",
"url": "http://dovecot.org/pipermail/dovecot/2011-May/059085.html"
},
{
"type": "WEB",
"url": "http://dovecot.org/pipermail/dovecot/2011-May/059086.html"
},
{
"type": "WEB",
"url": "http://hg.dovecot.org/dovecot-1.1/rev/3698dfe0f21c"
},
{
"type": "WEB",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061384.html"
},
{
"type": "WEB",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060815.html"
},
{
"type": "WEB",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060825.html"
},
{
"type": "WEB",
"url": "http://openwall.com/lists/oss-security/2011/05/18/4"
},
{
"type": "WEB",
"url": "http://openwall.com/lists/oss-security/2011/05/19/3"
},
{
"type": "WEB",
"url": "http://openwall.com/lists/oss-security/2011/05/19/6"
},
{
"type": "WEB",
"url": "http://osvdb.org/72495"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/44683"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/44712"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/44756"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/44771"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/44827"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2011/dsa-2252"
},
{
"type": "WEB",
"url": "http://www.dovecot.org/doc/NEWS-1.2"
},
{
"type": "WEB",
"url": "http://www.dovecot.org/doc/NEWS-2.0"
},
{
"type": "WEB",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:101"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2011-1187.html"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/47930"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/USN-1143-1"
}
],
"schema_version": "1.4.0",
"severity": []
}
var-201105-0095
Vulnerability from variot
lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\0' characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message. Dovecot is an open source IMAP and POP3 server for Linux/UNIX-like systems. Dovecot is prone to a denial-of-service vulnerability because it fails to properly parse message headers. A remote attacker can exploit this issue to crash the affected application, denying service to legitimate users. Dovecot versions prior to 1.2.17 and 2.0.13 are vulnerable. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
===================================================================== Red Hat Security Advisory
Synopsis: Moderate: dovecot security update Advisory ID: RHSA-2011:1187-01 Product: Red Hat Enterprise Linux Advisory URL: https://rhn.redhat.com/errata/RHSA-2011-1187.html Issue date: 2011-08-18 CVE Names: CVE-2011-1929 =====================================================================
- Summary:
Updated dovecot packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6.
The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
- Relevant releases/architectures:
RHEL Desktop Workstation (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64
- (CVE-2011-1929)
Users of dovecot are advised to upgrade to these updated packages, which contain a backported patch to resolve this issue. After installing the updated packages, the dovecot service will be restarted automatically.
- Solution:
Before applying this update, make sure all previously-released errata relevant to your system have been applied.
This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259
- Bugs fixed (http://bugzilla.redhat.com/):
706286 - CVE-2011-1929 dovecot: potential crash when parsing header names that contain NUL characters
- Package List:
Red Hat Enterprise Linux AS version 4:
Source: ftp://updates.redhat.com/enterprise/4AS/en/os/SRPMS/dovecot-0.99.11-10.EL4.src.rpm
i386: dovecot-0.99.11-10.EL4.i386.rpm dovecot-debuginfo-0.99.11-10.EL4.i386.rpm
ia64: dovecot-0.99.11-10.EL4.ia64.rpm dovecot-debuginfo-0.99.11-10.EL4.ia64.rpm
ppc: dovecot-0.99.11-10.EL4.ppc.rpm dovecot-debuginfo-0.99.11-10.EL4.ppc.rpm
s390: dovecot-0.99.11-10.EL4.s390.rpm dovecot-debuginfo-0.99.11-10.EL4.s390.rpm
s390x: dovecot-0.99.11-10.EL4.s390x.rpm dovecot-debuginfo-0.99.11-10.EL4.s390x.rpm
x86_64: dovecot-0.99.11-10.EL4.x86_64.rpm dovecot-debuginfo-0.99.11-10.EL4.x86_64.rpm
Red Hat Enterprise Linux Desktop version 4:
Source: ftp://updates.redhat.com/enterprise/4Desktop/en/os/SRPMS/dovecot-0.99.11-10.EL4.src.rpm
i386: dovecot-0.99.11-10.EL4.i386.rpm dovecot-debuginfo-0.99.11-10.EL4.i386.rpm
x86_64: dovecot-0.99.11-10.EL4.x86_64.rpm dovecot-debuginfo-0.99.11-10.EL4.x86_64.rpm
Red Hat Enterprise Linux ES version 4:
Source: ftp://updates.redhat.com/enterprise/4ES/en/os/SRPMS/dovecot-0.99.11-10.EL4.src.rpm
i386: dovecot-0.99.11-10.EL4.i386.rpm dovecot-debuginfo-0.99.11-10.EL4.i386.rpm
ia64: dovecot-0.99.11-10.EL4.ia64.rpm dovecot-debuginfo-0.99.11-10.EL4.ia64.rpm
x86_64: dovecot-0.99.11-10.EL4.x86_64.rpm dovecot-debuginfo-0.99.11-10.EL4.x86_64.rpm
Red Hat Enterprise Linux WS version 4:
Source: ftp://updates.redhat.com/enterprise/4WS/en/os/SRPMS/dovecot-0.99.11-10.EL4.src.rpm
i386: dovecot-0.99.11-10.EL4.i386.rpm dovecot-debuginfo-0.99.11-10.EL4.i386.rpm
ia64: dovecot-0.99.11-10.EL4.ia64.rpm dovecot-debuginfo-0.99.11-10.EL4.ia64.rpm
x86_64: dovecot-0.99.11-10.EL4.x86_64.rpm dovecot-debuginfo-0.99.11-10.EL4.x86_64.rpm
RHEL Desktop Workstation (v. 5 client):
Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Client/en/os/SRPMS/dovecot-1.0.7-7.el5_7.1.src.rpm
i386: dovecot-1.0.7-7.el5_7.1.i386.rpm dovecot-debuginfo-1.0.7-7.el5_7.1.i386.rpm
x86_64: dovecot-1.0.7-7.el5_7.1.x86_64.rpm dovecot-debuginfo-1.0.7-7.el5_7.1.x86_64.rpm
Red Hat Enterprise Linux (v. 5 server):
Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/os/SRPMS/dovecot-1.0.7-7.el5_7.1.src.rpm
i386: dovecot-1.0.7-7.el5_7.1.i386.rpm dovecot-debuginfo-1.0.7-7.el5_7.1.i386.rpm
ia64: dovecot-1.0.7-7.el5_7.1.ia64.rpm dovecot-debuginfo-1.0.7-7.el5_7.1.ia64.rpm
ppc: dovecot-1.0.7-7.el5_7.1.ppc.rpm dovecot-debuginfo-1.0.7-7.el5_7.1.ppc.rpm
s390x: dovecot-1.0.7-7.el5_7.1.s390x.rpm dovecot-debuginfo-1.0.7-7.el5_7.1.s390x.rpm
x86_64: dovecot-1.0.7-7.el5_7.1.x86_64.rpm dovecot-debuginfo-1.0.7-7.el5_7.1.x86_64.rpm
Red Hat Enterprise Linux Server (v. 6):
Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/dovecot-2.0.9-2.el6_1.1.src.rpm
i386: dovecot-2.0.9-2.el6_1.1.i686.rpm dovecot-debuginfo-2.0.9-2.el6_1.1.i686.rpm dovecot-mysql-2.0.9-2.el6_1.1.i686.rpm dovecot-pgsql-2.0.9-2.el6_1.1.i686.rpm dovecot-pigeonhole-2.0.9-2.el6_1.1.i686.rpm
ppc64: dovecot-2.0.9-2.el6_1.1.ppc.rpm dovecot-2.0.9-2.el6_1.1.ppc64.rpm dovecot-debuginfo-2.0.9-2.el6_1.1.ppc.rpm dovecot-debuginfo-2.0.9-2.el6_1.1.ppc64.rpm dovecot-mysql-2.0.9-2.el6_1.1.ppc64.rpm dovecot-pgsql-2.0.9-2.el6_1.1.ppc64.rpm dovecot-pigeonhole-2.0.9-2.el6_1.1.ppc64.rpm
s390x: dovecot-2.0.9-2.el6_1.1.s390.rpm dovecot-2.0.9-2.el6_1.1.s390x.rpm dovecot-debuginfo-2.0.9-2.el6_1.1.s390.rpm dovecot-debuginfo-2.0.9-2.el6_1.1.s390x.rpm dovecot-mysql-2.0.9-2.el6_1.1.s390x.rpm dovecot-pgsql-2.0.9-2.el6_1.1.s390x.rpm dovecot-pigeonhole-2.0.9-2.el6_1.1.s390x.rpm
x86_64: dovecot-2.0.9-2.el6_1.1.i686.rpm dovecot-2.0.9-2.el6_1.1.x86_64.rpm dovecot-debuginfo-2.0.9-2.el6_1.1.i686.rpm dovecot-debuginfo-2.0.9-2.el6_1.1.x86_64.rpm dovecot-mysql-2.0.9-2.el6_1.1.x86_64.rpm dovecot-pgsql-2.0.9-2.el6_1.1.x86_64.rpm dovecot-pigeonhole-2.0.9-2.el6_1.1.x86_64.rpm
Red Hat Enterprise Linux Server Optional (v. 6):
Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/dovecot-2.0.9-2.el6_1.1.src.rpm
i386: dovecot-debuginfo-2.0.9-2.el6_1.1.i686.rpm dovecot-devel-2.0.9-2.el6_1.1.i686.rpm
ppc64: dovecot-debuginfo-2.0.9-2.el6_1.1.ppc64.rpm dovecot-devel-2.0.9-2.el6_1.1.ppc64.rpm
s390x: dovecot-debuginfo-2.0.9-2.el6_1.1.s390x.rpm dovecot-devel-2.0.9-2.el6_1.1.s390x.rpm
x86_64: dovecot-debuginfo-2.0.9-2.el6_1.1.x86_64.rpm dovecot-devel-2.0.9-2.el6_1.1.x86_64.rpm
Red Hat Enterprise Linux Workstation (v. 6):
Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Workstation/en/os/SRPMS/dovecot-2.0.9-2.el6_1.1.src.rpm
i386: dovecot-2.0.9-2.el6_1.1.i686.rpm dovecot-debuginfo-2.0.9-2.el6_1.1.i686.rpm dovecot-mysql-2.0.9-2.el6_1.1.i686.rpm dovecot-pgsql-2.0.9-2.el6_1.1.i686.rpm dovecot-pigeonhole-2.0.9-2.el6_1.1.i686.rpm
x86_64: dovecot-2.0.9-2.el6_1.1.i686.rpm dovecot-2.0.9-2.el6_1.1.x86_64.rpm dovecot-debuginfo-2.0.9-2.el6_1.1.i686.rpm dovecot-debuginfo-2.0.9-2.el6_1.1.x86_64.rpm dovecot-mysql-2.0.9-2.el6_1.1.x86_64.rpm dovecot-pgsql-2.0.9-2.el6_1.1.x86_64.rpm dovecot-pigeonhole-2.0.9-2.el6_1.1.x86_64.rpm
Red Hat Enterprise Linux Workstation Optional (v. 6):
Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Workstation/en/os/SRPMS/dovecot-2.0.9-2.el6_1.1.src.rpm
i386: dovecot-debuginfo-2.0.9-2.el6_1.1.i686.rpm dovecot-devel-2.0.9-2.el6_1.1.i686.rpm
x86_64: dovecot-debuginfo-2.0.9-2.el6_1.1.x86_64.rpm dovecot-devel-2.0.9-2.el6_1.1.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package
- References:
https://www.redhat.com/security/data/cve/CVE-2011-1929.html https://access.redhat.com/security/updates/classification/#moderate
- Contact:
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/
Copyright 2011 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux)
iD8DBQFOTW29XlSAg2UNWIIRAr8LAKCu85vT3BXBKZ1SRebWK7B9nG6OFQCfYR3k P3AdaDf2BpXnEhk2OL5DTpo= =eG31 -----END PGP SIGNATURE-----
-- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce . - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201110-04
http://security.gentoo.org/
Severity: High Title: Dovecot: Multiple vulnerabilities Date: October 10, 2011 Bugs: #286844, #293954, #314533, #368653 ID: 201110-04
Synopsis
Multiple vulnerabilities were found in Dovecot, the worst of which allowing for remote execution of arbitrary code.
Affected packages
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 net-mail/dovecot < 2.0.13 *>= 1.2.17 >= 2.0.13
Description
Multiple vulnerabilities have been discovered in Dovecot. Please review the CVE identifiers referenced below for details.
Impact
A remote attacker could exploit these vulnerabilities to cause the remote execution of arbitrary code, or a Denial of Service condition, to conduct directory traversal attacks, corrupt data, or disclose information.
Workaround
There is no known workaround at this time.
Resolution
All Dovecot 1 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-mail/dovecot-1.2.17"
All Dovecot 2 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-mail/dovecot-2.0.13"
NOTE: This is a legacy GLSA. Updates for all affected architectures are available since May 28, 2011. It is likely that your system is already no longer affected by this issue.
References
[ 1 ] CVE-2009-3235 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-3235 [ 2 ] CVE-2009-3897 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-3897 [ 3 ] CVE-2010-0745 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-0745 [ 4 ] CVE-2010-3304 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3304 [ 5 ] CVE-2010-3706 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3706 [ 6 ] CVE-2010-3707 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3707 [ 7 ] CVE-2010-3779 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3779 [ 8 ] CVE-2010-3780 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3780 [ 9 ] CVE-2011-1929 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1929 [ 10 ] CVE-2011-2166 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-2166 [ 11 ] CVE-2011-2167 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-2167
Availability
This GLSA and any updates to it are available for viewing at the Gentoo Security Website:
http://security.gentoo.org/glsa/glsa-201110-04.xml
Concerns?
Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.
License
Copyright 2011 Gentoo Foundation, Inc; referenced text belongs to its owner(s).
The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5
.
Packages for 2009.0 are provided as of the Extended Maintenance Program. The verification of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/security/advisories
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com
Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
iD8DBQFN3e9VmqjQ0CJFipgRAjwfAJ95TzNOzqcOHVs9I3gIj1PqbuH6+gCfaxLM TC22GorN3moiTA4Ska8YOLU= =2Q1M -----END PGP SIGNATURE-----
Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/ . ========================================================================== Ubuntu Security Notice USN-1143-1 June 02, 2011
dovecot vulnerability
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 11.04
- Ubuntu 10.10
- Ubuntu 10.04 LTS
Summary:
An attacker could send a crafted email message that could disrupt email service.
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 11.04: dovecot-common 1:1.2.15-3ubuntu2.1
Ubuntu 10.10: dovecot-common 1:1.2.12-1ubuntu8.2
Ubuntu 10.04 LTS: dovecot-common 1:1.2.9-1ubuntu6.4
In general, a standard system update will make all the necessary changes.
The oldstable distribution (lenny) is not affected.
For the stable distribution (squeeze), this problem has been fixed in version 1.2.15-7.
For the unstable distribution (sid), this problem has been fixed in version 2.0.13-1
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201105-0095",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "dovecot",
"scope": "eq",
"trust": 1.9,
"vendor": "dovecot",
"version": "2.0.12"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.9,
"vendor": "dovecot",
"version": "2.0.1"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.9,
"vendor": "dovecot",
"version": "2.0.0"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.6,
"vendor": "dovecot",
"version": "2.0.8"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.6,
"vendor": "dovecot",
"version": "2.0.7"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.6,
"vendor": "dovecot",
"version": "2.0"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.6,
"vendor": "dovecot",
"version": "2.0.9"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.6,
"vendor": "dovecot",
"version": "2.0.6"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.6,
"vendor": "dovecot",
"version": "2.0.10"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.6,
"vendor": "dovecot",
"version": "2.0.11"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.3,
"vendor": "dovecot",
"version": "2.0.4"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.3,
"vendor": "dovecot",
"version": "2.0.3"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.3,
"vendor": "dovecot",
"version": "2.0.2"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.3,
"vendor": "dovecot",
"version": "1.2.16"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.3,
"vendor": "dovecot",
"version": "1.2.15"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.3,
"vendor": "dovecot",
"version": "1.2.14"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.3,
"vendor": "dovecot",
"version": "1.2.13"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.3,
"vendor": "dovecot",
"version": "1.2.12"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.3,
"vendor": "dovecot",
"version": "1.2.10"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.3,
"vendor": "dovecot",
"version": "1.2.9"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.3,
"vendor": "dovecot",
"version": "1.2.8"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.3,
"vendor": "dovecot",
"version": "1.2.7"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.3,
"vendor": "dovecot",
"version": "2.0.5"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.3,
"vendor": "dovecot",
"version": "1.2.6"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.3,
"vendor": "dovecot",
"version": "1.2.5"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.3,
"vendor": "dovecot",
"version": "1.2.4"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.3,
"vendor": "dovecot",
"version": "1.2.3"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.3,
"vendor": "dovecot",
"version": "1.2.2"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.3,
"vendor": "dovecot",
"version": "1.2.11"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.0,
"vendor": "dovecot",
"version": "1.2.0"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 1.0,
"vendor": "dovecot",
"version": "1.2.1"
},
{
"model": "dovecot",
"scope": "lt",
"trust": 0.8,
"vendor": "timo sirainen",
"version": "1.2.17"
},
{
"model": "dovecot",
"scope": "lt",
"trust": 0.8,
"vendor": "timo sirainen",
"version": "2.0.13"
},
{
"model": "turbolinux appliance server",
"scope": "eq",
"trust": 0.8,
"vendor": "turbo linux",
"version": "3.0"
},
{
"model": "turbolinux appliance server",
"scope": "eq",
"trust": 0.8,
"vendor": "turbo linux",
"version": "3.0 (x64)"
},
{
"model": "turbolinux server",
"scope": "eq",
"trust": 0.8,
"vendor": "turbo linux",
"version": "11"
},
{
"model": "turbolinux server",
"scope": "eq",
"trust": 0.8,
"vendor": "turbo linux",
"version": "11 (x64)"
},
{
"model": "enterprise linux",
"scope": "eq",
"trust": 0.8,
"vendor": "red hat",
"version": "4 (as)"
},
{
"model": "enterprise linux",
"scope": "eq",
"trust": 0.8,
"vendor": "red hat",
"version": "4 (es)"
},
{
"model": "enterprise linux",
"scope": "eq",
"trust": 0.8,
"vendor": "red hat",
"version": "4 (ws)"
},
{
"model": "enterprise linux",
"scope": "eq",
"trust": 0.8,
"vendor": "red hat",
"version": "5 (server)"
},
{
"model": "enterprise linux desktop",
"scope": "eq",
"trust": 0.8,
"vendor": "red hat",
"version": "4.0"
},
{
"model": "enterprise linux server",
"scope": "eq",
"trust": 0.8,
"vendor": "red hat",
"version": "6"
},
{
"model": "enterprise linux server eus",
"scope": "eq",
"trust": 0.8,
"vendor": "red hat",
"version": "6.1.z"
},
{
"model": "enterprise linux workstation",
"scope": "eq",
"trust": 0.8,
"vendor": "red hat",
"version": "6"
},
{
"model": "rhel desktop workstation",
"scope": "eq",
"trust": 0.8,
"vendor": "red hat",
"version": "5 (client)"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 0.6,
"vendor": "dovecot",
"version": "1.2.x"
},
{
"model": "dovecot",
"scope": "eq",
"trust": 0.6,
"vendor": "dovecot",
"version": "2.0.x"
},
{
"model": "linux powerpc",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "11.04"
},
{
"model": "linux i386",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "11.04"
},
{
"model": "linux arm",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "11.04"
},
{
"model": "linux amd64",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "11.04"
},
{
"model": "linux powerpc",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "10.10"
},
{
"model": "linux i386",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "10.10"
},
{
"model": "linux arm",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "10.10"
},
{
"model": "linux amd64",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "10.10"
},
{
"model": "linux sparc",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "10.04"
},
{
"model": "linux powerpc",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "10.04"
},
{
"model": "linux i386",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "10.04"
},
{
"model": "linux arm",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "10.04"
},
{
"model": "linux amd64",
"scope": "eq",
"trust": 0.3,
"vendor": "ubuntu",
"version": "10.04"
},
{
"model": "opensuse",
"scope": "eq",
"trust": 0.3,
"vendor": "s u s e",
"version": "11.4"
},
{
"model": "opensuse",
"scope": "eq",
"trust": 0.3,
"vendor": "s u s e",
"version": "11.3"
},
{
"model": "enterprise linux ws",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "4"
},
{
"model": "enterprise linux workstation optional",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "6"
},
{
"model": "enterprise linux workstation",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "6"
},
{
"model": "enterprise linux server optional",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "6"
},
{
"model": "enterprise linux server",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "6"
},
{
"model": "enterprise linux es",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "4"
},
{
"model": "enterprise linux desktop workstation client",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "5"
},
{
"model": "enterprise linux as",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "4"
},
{
"model": "enterprise linux desktop version",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "4"
},
{
"model": "enterprise linux server",
"scope": "eq",
"trust": 0.3,
"vendor": "redhat",
"version": "5"
},
{
"model": "linux mandrake x86 64",
"scope": "eq",
"trust": 0.3,
"vendor": "mandriva",
"version": "2010.1"
},
{
"model": "linux mandrake",
"scope": "eq",
"trust": 0.3,
"vendor": "mandriva",
"version": "2010.1"
},
{
"model": "linux mandrake x86 64",
"scope": "eq",
"trust": 0.3,
"vendor": "mandriva",
"version": "2009.0"
},
{
"model": "linux mandrake",
"scope": "eq",
"trust": 0.3,
"vendor": "mandriva",
"version": "2009.0"
},
{
"model": "enterprise server x86 64",
"scope": "eq",
"trust": 0.3,
"vendor": "mandrakesoft",
"version": "5"
},
{
"model": "enterprise server",
"scope": "eq",
"trust": 0.3,
"vendor": "mandrakesoft",
"version": "5"
},
{
"model": "linux",
"scope": null,
"trust": 0.3,
"vendor": "gentoo",
"version": null
},
{
"model": "dovecot",
"scope": "ne",
"trust": 0.3,
"vendor": "dovecot",
"version": "2.0.13"
},
{
"model": "dovecot",
"scope": "ne",
"trust": 0.3,
"vendor": "dovecot",
"version": "1.2.17"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2011-2132"
},
{
"db": "BID",
"id": "47930"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-001934"
},
{
"db": "CNNVD",
"id": "CNNVD-201105-250"
},
{
"db": "NVD",
"id": "CVE-2011-1929"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:dovecot:dovecot",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:turbolinux:turbolinux_appliance_server",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:turbolinux:turbolinux_server",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:redhat:enterprise_linux",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:redhat:enterprise_linux_desktop",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:redhat:enterprise_linux_server",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:redhat:rhel_server_eus",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:redhat:enterprise_linux_workstation",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:redhat:rhel_desktop_workstation",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2011-001934"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Timo Sirainen",
"sources": [
{
"db": "BID",
"id": "47930"
}
],
"trust": 0.3
},
"cve": "CVE-2011-1929",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "CVE-2011-1929",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2011-1929",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2011-1929",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNNVD",
"id": "CNNVD-201105-250",
"trust": 0.6,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2011-001934"
},
{
"db": "CNNVD",
"id": "CNNVD-201105-250"
},
{
"db": "NVD",
"id": "CVE-2011-1929"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle \u0027\\0\u0027 characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message. Dovecot is an open source IMAP and POP3 server for Linux/UNIX-like systems. Dovecot is prone to a denial-of-service vulnerability because it fails to properly parse message headers. \nA remote attacker can exploit this issue to crash the affected application, denying service to legitimate users. \nDovecot versions prior to 1.2.17 and 2.0.13 are vulnerable. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\n=====================================================================\n Red Hat Security Advisory\n\nSynopsis: Moderate: dovecot security update\nAdvisory ID: RHSA-2011:1187-01\nProduct: Red Hat Enterprise Linux\nAdvisory URL: https://rhn.redhat.com/errata/RHSA-2011-1187.html\nIssue date: 2011-08-18\nCVE Names: CVE-2011-1929 \n=====================================================================\n\n1. Summary:\n\nUpdated dovecot packages that fix one security issue are now available for\nRed Hat Enterprise Linux 4, 5, and 6. \n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available from the CVE link in\nthe References section. \n\n2. Relevant releases/architectures:\n\nRHEL Desktop Workstation (v. 5 client) - i386, x86_64\nRed Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64\nRed Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64\nRed Hat Enterprise Linux Desktop version 4 - i386, x86_64\nRed Hat Enterprise Linux ES version 4 - i386, ia64, x86_64\nRed Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64\nRed Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64\nRed Hat Enterprise Linux WS version 4 - i386, ia64, x86_64\nRed Hat Enterprise Linux Workstation (v. 6) - i386, x86_64\nRed Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64\n\n3. \n(CVE-2011-1929)\n\nUsers of dovecot are advised to upgrade to these updated packages, which\ncontain a backported patch to resolve this issue. After installing the\nupdated packages, the dovecot service will be restarted automatically. \n\n4. Solution:\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied. \n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\n5. Bugs fixed (http://bugzilla.redhat.com/):\n\n706286 - CVE-2011-1929 dovecot: potential crash when parsing header names that contain NUL characters\n\n6. Package List:\n\nRed Hat Enterprise Linux AS version 4:\n\nSource:\nftp://updates.redhat.com/enterprise/4AS/en/os/SRPMS/dovecot-0.99.11-10.EL4.src.rpm\n\ni386:\ndovecot-0.99.11-10.EL4.i386.rpm\ndovecot-debuginfo-0.99.11-10.EL4.i386.rpm\n\nia64:\ndovecot-0.99.11-10.EL4.ia64.rpm\ndovecot-debuginfo-0.99.11-10.EL4.ia64.rpm\n\nppc:\ndovecot-0.99.11-10.EL4.ppc.rpm\ndovecot-debuginfo-0.99.11-10.EL4.ppc.rpm\n\ns390:\ndovecot-0.99.11-10.EL4.s390.rpm\ndovecot-debuginfo-0.99.11-10.EL4.s390.rpm\n\ns390x:\ndovecot-0.99.11-10.EL4.s390x.rpm\ndovecot-debuginfo-0.99.11-10.EL4.s390x.rpm\n\nx86_64:\ndovecot-0.99.11-10.EL4.x86_64.rpm\ndovecot-debuginfo-0.99.11-10.EL4.x86_64.rpm\n\nRed Hat Enterprise Linux Desktop version 4:\n\nSource:\nftp://updates.redhat.com/enterprise/4Desktop/en/os/SRPMS/dovecot-0.99.11-10.EL4.src.rpm\n\ni386:\ndovecot-0.99.11-10.EL4.i386.rpm\ndovecot-debuginfo-0.99.11-10.EL4.i386.rpm\n\nx86_64:\ndovecot-0.99.11-10.EL4.x86_64.rpm\ndovecot-debuginfo-0.99.11-10.EL4.x86_64.rpm\n\nRed Hat Enterprise Linux ES version 4:\n\nSource:\nftp://updates.redhat.com/enterprise/4ES/en/os/SRPMS/dovecot-0.99.11-10.EL4.src.rpm\n\ni386:\ndovecot-0.99.11-10.EL4.i386.rpm\ndovecot-debuginfo-0.99.11-10.EL4.i386.rpm\n\nia64:\ndovecot-0.99.11-10.EL4.ia64.rpm\ndovecot-debuginfo-0.99.11-10.EL4.ia64.rpm\n\nx86_64:\ndovecot-0.99.11-10.EL4.x86_64.rpm\ndovecot-debuginfo-0.99.11-10.EL4.x86_64.rpm\n\nRed Hat Enterprise Linux WS version 4:\n\nSource:\nftp://updates.redhat.com/enterprise/4WS/en/os/SRPMS/dovecot-0.99.11-10.EL4.src.rpm\n\ni386:\ndovecot-0.99.11-10.EL4.i386.rpm\ndovecot-debuginfo-0.99.11-10.EL4.i386.rpm\n\nia64:\ndovecot-0.99.11-10.EL4.ia64.rpm\ndovecot-debuginfo-0.99.11-10.EL4.ia64.rpm\n\nx86_64:\ndovecot-0.99.11-10.EL4.x86_64.rpm\ndovecot-debuginfo-0.99.11-10.EL4.x86_64.rpm\n\nRHEL Desktop Workstation (v. 5 client):\n\nSource:\nftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Client/en/os/SRPMS/dovecot-1.0.7-7.el5_7.1.src.rpm\n\ni386:\ndovecot-1.0.7-7.el5_7.1.i386.rpm\ndovecot-debuginfo-1.0.7-7.el5_7.1.i386.rpm\n\nx86_64:\ndovecot-1.0.7-7.el5_7.1.x86_64.rpm\ndovecot-debuginfo-1.0.7-7.el5_7.1.x86_64.rpm\n\nRed Hat Enterprise Linux (v. 5 server):\n\nSource:\nftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/os/SRPMS/dovecot-1.0.7-7.el5_7.1.src.rpm\n\ni386:\ndovecot-1.0.7-7.el5_7.1.i386.rpm\ndovecot-debuginfo-1.0.7-7.el5_7.1.i386.rpm\n\nia64:\ndovecot-1.0.7-7.el5_7.1.ia64.rpm\ndovecot-debuginfo-1.0.7-7.el5_7.1.ia64.rpm\n\nppc:\ndovecot-1.0.7-7.el5_7.1.ppc.rpm\ndovecot-debuginfo-1.0.7-7.el5_7.1.ppc.rpm\n\ns390x:\ndovecot-1.0.7-7.el5_7.1.s390x.rpm\ndovecot-debuginfo-1.0.7-7.el5_7.1.s390x.rpm\n\nx86_64:\ndovecot-1.0.7-7.el5_7.1.x86_64.rpm\ndovecot-debuginfo-1.0.7-7.el5_7.1.x86_64.rpm\n\nRed Hat Enterprise Linux Server (v. 6):\n\nSource:\nftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/dovecot-2.0.9-2.el6_1.1.src.rpm\n\ni386:\ndovecot-2.0.9-2.el6_1.1.i686.rpm\ndovecot-debuginfo-2.0.9-2.el6_1.1.i686.rpm\ndovecot-mysql-2.0.9-2.el6_1.1.i686.rpm\ndovecot-pgsql-2.0.9-2.el6_1.1.i686.rpm\ndovecot-pigeonhole-2.0.9-2.el6_1.1.i686.rpm\n\nppc64:\ndovecot-2.0.9-2.el6_1.1.ppc.rpm\ndovecot-2.0.9-2.el6_1.1.ppc64.rpm\ndovecot-debuginfo-2.0.9-2.el6_1.1.ppc.rpm\ndovecot-debuginfo-2.0.9-2.el6_1.1.ppc64.rpm\ndovecot-mysql-2.0.9-2.el6_1.1.ppc64.rpm\ndovecot-pgsql-2.0.9-2.el6_1.1.ppc64.rpm\ndovecot-pigeonhole-2.0.9-2.el6_1.1.ppc64.rpm\n\ns390x:\ndovecot-2.0.9-2.el6_1.1.s390.rpm\ndovecot-2.0.9-2.el6_1.1.s390x.rpm\ndovecot-debuginfo-2.0.9-2.el6_1.1.s390.rpm\ndovecot-debuginfo-2.0.9-2.el6_1.1.s390x.rpm\ndovecot-mysql-2.0.9-2.el6_1.1.s390x.rpm\ndovecot-pgsql-2.0.9-2.el6_1.1.s390x.rpm\ndovecot-pigeonhole-2.0.9-2.el6_1.1.s390x.rpm\n\nx86_64:\ndovecot-2.0.9-2.el6_1.1.i686.rpm\ndovecot-2.0.9-2.el6_1.1.x86_64.rpm\ndovecot-debuginfo-2.0.9-2.el6_1.1.i686.rpm\ndovecot-debuginfo-2.0.9-2.el6_1.1.x86_64.rpm\ndovecot-mysql-2.0.9-2.el6_1.1.x86_64.rpm\ndovecot-pgsql-2.0.9-2.el6_1.1.x86_64.rpm\ndovecot-pigeonhole-2.0.9-2.el6_1.1.x86_64.rpm\n\nRed Hat Enterprise Linux Server Optional (v. 6):\n\nSource:\nftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/dovecot-2.0.9-2.el6_1.1.src.rpm\n\ni386:\ndovecot-debuginfo-2.0.9-2.el6_1.1.i686.rpm\ndovecot-devel-2.0.9-2.el6_1.1.i686.rpm\n\nppc64:\ndovecot-debuginfo-2.0.9-2.el6_1.1.ppc64.rpm\ndovecot-devel-2.0.9-2.el6_1.1.ppc64.rpm\n\ns390x:\ndovecot-debuginfo-2.0.9-2.el6_1.1.s390x.rpm\ndovecot-devel-2.0.9-2.el6_1.1.s390x.rpm\n\nx86_64:\ndovecot-debuginfo-2.0.9-2.el6_1.1.x86_64.rpm\ndovecot-devel-2.0.9-2.el6_1.1.x86_64.rpm\n\nRed Hat Enterprise Linux Workstation (v. 6):\n\nSource:\nftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Workstation/en/os/SRPMS/dovecot-2.0.9-2.el6_1.1.src.rpm\n\ni386:\ndovecot-2.0.9-2.el6_1.1.i686.rpm\ndovecot-debuginfo-2.0.9-2.el6_1.1.i686.rpm\ndovecot-mysql-2.0.9-2.el6_1.1.i686.rpm\ndovecot-pgsql-2.0.9-2.el6_1.1.i686.rpm\ndovecot-pigeonhole-2.0.9-2.el6_1.1.i686.rpm\n\nx86_64:\ndovecot-2.0.9-2.el6_1.1.i686.rpm\ndovecot-2.0.9-2.el6_1.1.x86_64.rpm\ndovecot-debuginfo-2.0.9-2.el6_1.1.i686.rpm\ndovecot-debuginfo-2.0.9-2.el6_1.1.x86_64.rpm\ndovecot-mysql-2.0.9-2.el6_1.1.x86_64.rpm\ndovecot-pgsql-2.0.9-2.el6_1.1.x86_64.rpm\ndovecot-pigeonhole-2.0.9-2.el6_1.1.x86_64.rpm\n\nRed Hat Enterprise Linux Workstation Optional (v. 6):\n\nSource:\nftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Workstation/en/os/SRPMS/dovecot-2.0.9-2.el6_1.1.src.rpm\n\ni386:\ndovecot-debuginfo-2.0.9-2.el6_1.1.i686.rpm\ndovecot-devel-2.0.9-2.el6_1.1.i686.rpm\n\nx86_64:\ndovecot-debuginfo-2.0.9-2.el6_1.1.x86_64.rpm\ndovecot-devel-2.0.9-2.el6_1.1.x86_64.rpm\n\nThese packages are GPG signed by Red Hat for security. Our key and \ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/#package\n\n7. References:\n\nhttps://www.redhat.com/security/data/cve/CVE-2011-1929.html\nhttps://access.redhat.com/security/updates/classification/#moderate\n\n8. Contact:\n\nThe Red Hat security contact is \u003csecalert@redhat.com\u003e. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2011 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1.4.4 (GNU/Linux)\n\niD8DBQFOTW29XlSAg2UNWIIRAr8LAKCu85vT3BXBKZ1SRebWK7B9nG6OFQCfYR3k\nP3AdaDf2BpXnEhk2OL5DTpo=\n=eG31\n-----END PGP SIGNATURE-----\n\n\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://www.redhat.com/mailman/listinfo/rhsa-announce\n. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nGentoo Linux Security Advisory GLSA 201110-04\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n http://security.gentoo.org/\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\n Severity: High\n Title: Dovecot: Multiple vulnerabilities\n Date: October 10, 2011\n Bugs: #286844, #293954, #314533, #368653\n ID: 201110-04\n\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\nSynopsis\n========\n\nMultiple vulnerabilities were found in Dovecot, the worst of which\nallowing for remote execution of arbitrary code. \n\nAffected packages\n=================\n\n -------------------------------------------------------------------\n Package / Vulnerable / Unaffected\n -------------------------------------------------------------------\n 1 net-mail/dovecot \u003c 2.0.13 *\u003e= 1.2.17\n \u003e= 2.0.13\n\nDescription\n===========\n\nMultiple vulnerabilities have been discovered in Dovecot. Please review\nthe CVE identifiers referenced below for details. \n\nImpact\n======\n\nA remote attacker could exploit these vulnerabilities to cause the\nremote execution of arbitrary code, or a Denial of Service condition,\nto conduct directory traversal attacks, corrupt data, or disclose\ninformation. \n\nWorkaround\n==========\n\nThere is no known workaround at this time. \n\nResolution\n==========\n\nAll Dovecot 1 users should upgrade to the latest version:\n\n # emerge --sync\n # emerge --ask --oneshot --verbose \"\u003e=net-mail/dovecot-1.2.17\"\n\nAll Dovecot 2 users should upgrade to the latest version:\n\n # emerge --sync\n # emerge --ask --oneshot --verbose \"\u003e=net-mail/dovecot-2.0.13\"\n\nNOTE: This is a legacy GLSA. Updates for all affected architectures are\navailable since May 28, 2011. It is likely that your system is already\nno longer affected by this issue. \n\nReferences\n==========\n\n[ 1 ] CVE-2009-3235\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-3235\n[ 2 ] CVE-2009-3897\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-3897\n[ 3 ] CVE-2010-0745\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-0745\n[ 4 ] CVE-2010-3304\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3304\n[ 5 ] CVE-2010-3706\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3706\n[ 6 ] CVE-2010-3707\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3707\n[ 7 ] CVE-2010-3779\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3779\n[ 8 ] CVE-2010-3780\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3780\n[ 9 ] CVE-2011-1929\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1929\n[ 10 ] CVE-2011-2166\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-2166\n[ 11 ] CVE-2011-2167\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-2167\n\nAvailability\n============\n\nThis GLSA and any updates to it are available for viewing at\nthe Gentoo Security Website:\n\n http://security.gentoo.org/glsa/glsa-201110-04.xml\n\nConcerns?\n=========\n\nSecurity is a primary focus of Gentoo Linux and ensuring the\nconfidentiality and security of our users\u0027 machines is of utmost\nimportance to us. Any security concerns should be addressed to\nsecurity@gentoo.org or alternatively, you may file a bug at\nhttps://bugs.gentoo.org. \n\nLicense\n=======\n\nCopyright 2011 Gentoo Foundation, Inc; referenced text\nbelongs to its owner(s). \n\nThe contents of this document are licensed under the\nCreative Commons - Attribution / Share Alike license. \n\nhttp://creativecommons.org/licenses/by-sa/2.5\n\n\n\n. \n \n Packages for 2009.0 are provided as of the Extended Maintenance\n Program. The verification\n of md5 checksums and GPG signatures is performed automatically for you. \n\n All packages are signed by Mandriva for security. You can obtain the\n GPG public key of the Mandriva Security Team by executing:\n\n gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98\n\n You can view other update advisories for Mandriva Linux at:\n\n http://www.mandriva.com/security/advisories\n\n If you want to report vulnerabilities, please contact\n\n security_(at)_mandriva.com\n _______________________________________________________________________\n\n Type Bits/KeyID Date User ID\n pub 1024D/22458A98 2000-07-10 Mandriva Security Team\n \u003csecurity*mandriva.com\u003e\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1.4.9 (GNU/Linux)\n\niD8DBQFN3e9VmqjQ0CJFipgRAjwfAJ95TzNOzqcOHVs9I3gIj1PqbuH6+gCfaxLM\nTC22GorN3moiTA4Ska8YOLU=\n=2Q1M\n-----END PGP SIGNATURE-----\n\n_______________________________________________\nFull-Disclosure - We believe in it. \nCharter: http://lists.grok.org.uk/full-disclosure-charter.html\nHosted and sponsored by Secunia - http://secunia.com/\n. ==========================================================================\nUbuntu Security Notice USN-1143-1\nJune 02, 2011\n\ndovecot vulnerability\n==========================================================================\n\nA security issue affects these releases of Ubuntu and its derivatives:\n\n- Ubuntu 11.04\n- Ubuntu 10.10\n- Ubuntu 10.04 LTS\n\nSummary:\n\nAn attacker could send a crafted email message that could disrupt email\nservice. \n\nUpdate instructions:\n\nThe problem can be corrected by updating your system to the following\npackage versions:\n\nUbuntu 11.04:\n dovecot-common 1:1.2.15-3ubuntu2.1\n\nUbuntu 10.10:\n dovecot-common 1:1.2.12-1ubuntu8.2\n\nUbuntu 10.04 LTS:\n dovecot-common 1:1.2.9-1ubuntu6.4\n\nIn general, a standard system update will make all the necessary changes. \n\n\nThe oldstable distribution (lenny) is not affected. \n\nFor the stable distribution (squeeze), this problem has been fixed in\nversion 1.2.15-7. \n\nFor the unstable distribution (sid), this problem has been fixed in\nversion 2.0.13-1",
"sources": [
{
"db": "NVD",
"id": "CVE-2011-1929"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-001934"
},
{
"db": "CNVD",
"id": "CNVD-2011-2132"
},
{
"db": "BID",
"id": "47930"
},
{
"db": "PACKETSTORM",
"id": "104202"
},
{
"db": "PACKETSTORM",
"id": "105652"
},
{
"db": "PACKETSTORM",
"id": "101719"
},
{
"db": "PACKETSTORM",
"id": "101933"
},
{
"db": "PACKETSTORM",
"id": "101949"
}
],
"trust": 2.88
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2011-1929",
"trust": 3.8
},
{
"db": "BID",
"id": "47930",
"trust": 3.3
},
{
"db": "OSVDB",
"id": "72495",
"trust": 1.8
},
{
"db": "SECUNIA",
"id": "44683",
"trust": 1.8
},
{
"db": "OPENWALL",
"id": "OSS-SECURITY/2011/05/19/6",
"trust": 1.6
},
{
"db": "OPENWALL",
"id": "OSS-SECURITY/2011/05/19/3",
"trust": 1.6
},
{
"db": "OPENWALL",
"id": "OSS-SECURITY/2011/05/18/4",
"trust": 1.6
},
{
"db": "SECUNIA",
"id": "44827",
"trust": 1.0
},
{
"db": "SECUNIA",
"id": "44771",
"trust": 1.0
},
{
"db": "SECUNIA",
"id": "44712",
"trust": 1.0
},
{
"db": "SECUNIA",
"id": "44756",
"trust": 1.0
},
{
"db": "JVNDB",
"id": "JVNDB-2011-001934",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2011-2132",
"trust": 0.6
},
{
"db": "MLIST",
"id": "[DOVECOT] 20110511 V2.0.13 RELEASED",
"trust": 0.6
},
{
"db": "MLIST",
"id": "[DOVECOT] 20110511 V1.2.17 RELEASED",
"trust": 0.6
},
{
"db": "MLIST",
"id": "[OSS-SECURITY] 20110519 RE: DOVECOT RELEASES",
"trust": 0.6
},
{
"db": "MLIST",
"id": "[OSS-SECURITY] 20110518 DOVECOT RELEASES",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201105-250",
"trust": 0.6
},
{
"db": "PACKETSTORM",
"id": "104202",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "105652",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "101719",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "101933",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "101949",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2011-2132"
},
{
"db": "BID",
"id": "47930"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-001934"
},
{
"db": "PACKETSTORM",
"id": "104202"
},
{
"db": "PACKETSTORM",
"id": "105652"
},
{
"db": "PACKETSTORM",
"id": "101719"
},
{
"db": "PACKETSTORM",
"id": "101933"
},
{
"db": "PACKETSTORM",
"id": "101949"
},
{
"db": "CNNVD",
"id": "CNNVD-201105-250"
},
{
"db": "NVD",
"id": "CVE-2011-1929"
}
]
},
"id": "VAR-201105-0095",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2011-2132"
}
],
"trust": 0.06
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2011-2132"
}
]
},
"last_update_date": "2024-11-29T21:31:12.341000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "v1.2.17 released",
"trust": 0.8,
"url": "http://dovecot.org/pipermail/dovecot/2011-May/059086.html"
},
{
"title": "v2.0.13 released",
"trust": 0.8,
"url": "http://dovecot.org/pipermail/dovecot/2011-May/059085.html"
},
{
"title": "dovecot-1.1 / changeset",
"trust": 0.8,
"url": "http://hg.dovecot.org/dovecot-1.1/rev/3698dfe0f21c"
},
{
"title": "RHSA-2011:1187",
"trust": 0.8,
"url": "https://rhn.redhat.com/errata/RHSA-2011-1187.html"
},
{
"title": "TLSA-2011-22",
"trust": 0.8,
"url": "http://www.turbolinux.co.jp/security/2011/TLSA-2011-22j.txt"
},
{
"title": "Dovecot denies service patch vulnerabilities",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/4012"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2011-2132"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-001934"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-20",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2011-001934"
},
{
"db": "NVD",
"id": "CVE-2011-1929"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.0,
"url": "http://www.securityfocus.com/bid/47930"
},
{
"trust": 1.9,
"url": "http://dovecot.org/pipermail/dovecot/2011-may/059086.html"
},
{
"trust": 1.9,
"url": "http://dovecot.org/pipermail/dovecot/2011-may/059085.html"
},
{
"trust": 1.9,
"url": "http://hg.dovecot.org/dovecot-1.1/rev/3698dfe0f21c"
},
{
"trust": 1.8,
"url": "http://osvdb.org/72495"
},
{
"trust": 1.8,
"url": "http://secunia.com/advisories/44683"
},
{
"trust": 1.6,
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=706286"
},
{
"trust": 1.6,
"url": "http://www.dovecot.org/doc/news-2.0"
},
{
"trust": 1.6,
"url": "http://www.dovecot.org/doc/news-1.2"
},
{
"trust": 1.6,
"url": "http://openwall.com/lists/oss-security/2011/05/19/6"
},
{
"trust": 1.6,
"url": "http://openwall.com/lists/oss-security/2011/05/19/3"
},
{
"trust": 1.6,
"url": "http://openwall.com/lists/oss-security/2011/05/18/4"
},
{
"trust": 1.0,
"url": "http://www.debian.org/security/2011/dsa-2252"
},
{
"trust": 1.0,
"url": "http://secunia.com/advisories/44756"
},
{
"trust": 1.0,
"url": "https://hermes.opensuse.org/messages/8581790"
},
{
"trust": 1.0,
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-may/060825.html"
},
{
"trust": 1.0,
"url": "http://www.redhat.com/support/errata/rhsa-2011-1187.html"
},
{
"trust": 1.0,
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-may/060815.html"
},
{
"trust": 1.0,
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-june/061384.html"
},
{
"trust": 1.0,
"url": "http://secunia.com/advisories/44827"
},
{
"trust": 1.0,
"url": "http://secunia.com/advisories/44771"
},
{
"trust": 1.0,
"url": "http://www.mandriva.com/security/advisories?name=mdvsa-2011:101"
},
{
"trust": 1.0,
"url": "http://secunia.com/advisories/44712"
},
{
"trust": 1.0,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67589"
},
{
"trust": 1.0,
"url": "http://www.ubuntu.com/usn/usn-1143-1"
},
{
"trust": 0.9,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-1929"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-1929"
},
{
"trust": 0.4,
"url": "https://nvd.nist.gov/vuln/detail/cve-2011-1929"
},
{
"trust": 0.3,
"url": "http://www.dovecot.org/"
},
{
"trust": 0.2,
"url": "http://secunia.com/"
},
{
"trust": 0.2,
"url": "http://lists.grok.org.uk/full-disclosure-charter.html"
},
{
"trust": 0.1,
"url": "https://www.redhat.com/mailman/listinfo/rhsa-announce"
},
{
"trust": 0.1,
"url": "https://rhn.redhat.com/errata/rhsa-2011-1187.html"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/kb/docs/doc-11259"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/team/key/#package"
},
{
"trust": 0.1,
"url": "http://bugzilla.redhat.com/):"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"trust": 0.1,
"url": "https://www.redhat.com/security/data/cve/cve-2011-1929.html"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/team/contact/"
},
{
"trust": 0.1,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-1929"
},
{
"trust": 0.1,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-3304"
},
{
"trust": 0.1,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-3706"
},
{
"trust": 0.1,
"url": "http://creativecommons.org/licenses/by-sa/2.5"
},
{
"trust": 0.1,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-0745"
},
{
"trust": 0.1,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2009-3897"
},
{
"trust": 0.1,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-3779"
},
{
"trust": 0.1,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-2167"
},
{
"trust": 0.1,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-3707"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2009-3897"
},
{
"trust": 0.1,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2010-3780"
},
{
"trust": 0.1,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-2166"
},
{
"trust": 0.1,
"url": "http://security.gentoo.org/"
},
{
"trust": 0.1,
"url": "https://bugs.gentoo.org."
},
{
"trust": 0.1,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2009-3235"
},
{
"trust": 0.1,
"url": "http://security.gentoo.org/glsa/glsa-201110-04.xml"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2009-3235"
},
{
"trust": 0.1,
"url": "http://store.mandriva.com/product_info.php\\?cpath=149\\\u0026amp;products_id=490"
},
{
"trust": 0.1,
"url": "http://www.mandriva.com/security/"
},
{
"trust": 0.1,
"url": "http://www.mandriva.com/security/advisories"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/dovecot/1:1.2.15-3ubuntu2.1"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/dovecot/1:1.2.12-1ubuntu8.2"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/dovecot/1:1.2.9-1ubuntu6.4"
},
{
"trust": 0.1,
"url": "http://www.debian.org/security/faq"
},
{
"trust": 0.1,
"url": "http://www.debian.org/security/"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2011-2132"
},
{
"db": "BID",
"id": "47930"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-001934"
},
{
"db": "PACKETSTORM",
"id": "104202"
},
{
"db": "PACKETSTORM",
"id": "105652"
},
{
"db": "PACKETSTORM",
"id": "101719"
},
{
"db": "PACKETSTORM",
"id": "101933"
},
{
"db": "PACKETSTORM",
"id": "101949"
},
{
"db": "CNNVD",
"id": "CNNVD-201105-250"
},
{
"db": "NVD",
"id": "CVE-2011-1929"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2011-2132"
},
{
"db": "BID",
"id": "47930"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-001934"
},
{
"db": "PACKETSTORM",
"id": "104202"
},
{
"db": "PACKETSTORM",
"id": "105652"
},
{
"db": "PACKETSTORM",
"id": "101719"
},
{
"db": "PACKETSTORM",
"id": "101933"
},
{
"db": "PACKETSTORM",
"id": "101949"
},
{
"db": "CNNVD",
"id": "CNNVD-201105-250"
},
{
"db": "NVD",
"id": "CVE-2011-1929"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2011-06-05T00:00:00",
"db": "CNVD",
"id": "CNVD-2011-2132"
},
{
"date": "2011-05-19T00:00:00",
"db": "BID",
"id": "47930"
},
{
"date": "2011-07-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2011-001934"
},
{
"date": "2011-08-19T01:53:33",
"db": "PACKETSTORM",
"id": "104202"
},
{
"date": "2011-10-10T22:42:12",
"db": "PACKETSTORM",
"id": "105652"
},
{
"date": "2011-05-26T13:48:10",
"db": "PACKETSTORM",
"id": "101719"
},
{
"date": "2011-06-02T06:03:22",
"db": "PACKETSTORM",
"id": "101933"
},
{
"date": "2010-06-02T12:13:00",
"db": "PACKETSTORM",
"id": "101949"
},
{
"date": "2011-05-25T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201105-250"
},
{
"date": "2011-05-24T23:55:04.387000",
"db": "NVD",
"id": "CVE-2011-1929"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2011-06-05T00:00:00",
"db": "CNVD",
"id": "CNVD-2011-2132"
},
{
"date": "2015-04-13T21:58:00",
"db": "BID",
"id": "47930"
},
{
"date": "2011-08-31T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2011-001934"
},
{
"date": "2011-05-25T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201105-250"
},
{
"date": "2024-11-21T01:27:19.797000",
"db": "NVD",
"id": "CVE-2011-1929"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "PACKETSTORM",
"id": "105652"
},
{
"db": "PACKETSTORM",
"id": "101719"
},
{
"db": "PACKETSTORM",
"id": "101933"
},
{
"db": "CNNVD",
"id": "CNNVD-201105-250"
}
],
"trust": 0.9
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Dovecot of lib-mail/message-header-parser.c Service disruption in (DoS) Vulnerabilities",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2011-001934"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "input validation",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201105-250"
}
],
"trust": 0.6
}
}
gsd-2011-1929
Vulnerability from gsd
Modified
2023-12-13 01:19
Details
lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\0' characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2011-1929",
"description": "lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle \u0027\\0\u0027 characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message.",
"id": "GSD-2011-1929",
"references": [
"https://www.suse.com/security/cve/CVE-2011-1929.html",
"https://www.debian.org/security/2011/dsa-2252",
"https://access.redhat.com/errata/RHSA-2011:1187",
"https://linux.oracle.com/cve/CVE-2011-1929.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2011-1929"
],
"details": "lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle \u0027\\0\u0027 characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message.",
"id": "GSD-2011-1929",
"modified": "2023-12-13T01:19:07.895403Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2011-1929",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle \u0027\\0\u0027 characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://dovecot.org/pipermail/dovecot/2011-May/059085.html",
"refsource": "MISC",
"url": "http://dovecot.org/pipermail/dovecot/2011-May/059085.html"
},
{
"name": "http://dovecot.org/pipermail/dovecot/2011-May/059086.html",
"refsource": "MISC",
"url": "http://dovecot.org/pipermail/dovecot/2011-May/059086.html"
},
{
"name": "http://hg.dovecot.org/dovecot-1.1/rev/3698dfe0f21c",
"refsource": "MISC",
"url": "http://hg.dovecot.org/dovecot-1.1/rev/3698dfe0f21c"
},
{
"name": "http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061384.html",
"refsource": "MISC",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061384.html"
},
{
"name": "http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060815.html",
"refsource": "MISC",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060815.html"
},
{
"name": "http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060825.html",
"refsource": "MISC",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060825.html"
},
{
"name": "http://openwall.com/lists/oss-security/2011/05/18/4",
"refsource": "MISC",
"url": "http://openwall.com/lists/oss-security/2011/05/18/4"
},
{
"name": "http://openwall.com/lists/oss-security/2011/05/19/3",
"refsource": "MISC",
"url": "http://openwall.com/lists/oss-security/2011/05/19/3"
},
{
"name": "http://openwall.com/lists/oss-security/2011/05/19/6",
"refsource": "MISC",
"url": "http://openwall.com/lists/oss-security/2011/05/19/6"
},
{
"name": "http://osvdb.org/72495",
"refsource": "MISC",
"url": "http://osvdb.org/72495"
},
{
"name": "http://secunia.com/advisories/44683",
"refsource": "MISC",
"url": "http://secunia.com/advisories/44683"
},
{
"name": "http://secunia.com/advisories/44712",
"refsource": "MISC",
"url": "http://secunia.com/advisories/44712"
},
{
"name": "http://secunia.com/advisories/44756",
"refsource": "MISC",
"url": "http://secunia.com/advisories/44756"
},
{
"name": "http://secunia.com/advisories/44771",
"refsource": "MISC",
"url": "http://secunia.com/advisories/44771"
},
{
"name": "http://secunia.com/advisories/44827",
"refsource": "MISC",
"url": "http://secunia.com/advisories/44827"
},
{
"name": "http://www.debian.org/security/2011/dsa-2252",
"refsource": "MISC",
"url": "http://www.debian.org/security/2011/dsa-2252"
},
{
"name": "http://www.dovecot.org/doc/NEWS-1.2",
"refsource": "MISC",
"url": "http://www.dovecot.org/doc/NEWS-1.2"
},
{
"name": "http://www.dovecot.org/doc/NEWS-2.0",
"refsource": "MISC",
"url": "http://www.dovecot.org/doc/NEWS-2.0"
},
{
"name": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:101",
"refsource": "MISC",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:101"
},
{
"name": "http://www.redhat.com/support/errata/RHSA-2011-1187.html",
"refsource": "MISC",
"url": "http://www.redhat.com/support/errata/RHSA-2011-1187.html"
},
{
"name": "http://www.securityfocus.com/bid/47930",
"refsource": "MISC",
"url": "http://www.securityfocus.com/bid/47930"
},
{
"name": "http://www.ubuntu.com/usn/USN-1143-1",
"refsource": "MISC",
"url": "http://www.ubuntu.com/usn/USN-1143-1"
},
{
"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67589",
"refsource": "MISC",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67589"
},
{
"name": "https://hermes.opensuse.org/messages/8581790",
"refsource": "MISC",
"url": "https://hermes.opensuse.org/messages/8581790"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=706286",
"refsource": "MISC",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=706286"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:1.2.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:1.2.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:1.2.13:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:1.2.15:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:1.2.9:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:1.2.10:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:1.2.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:1.2.12:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:1.2.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:1.2.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:1.2.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:1.2.14:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:1.2.16:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:1.2.11:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:1.2.8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:1.2.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:1.2.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:2.0.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:2.0.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:2.0.11:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:2.0.12:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:2.0.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:2.0.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:2.0.8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:2.0.9:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:2.0.10:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:2.0.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:2.0:beta1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:2.0.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:2.0.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:dovecot:dovecot:2.0.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2011-1929"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle \u0027\\0\u0027 characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "[oss-security] 20110519 Re: Dovecot releases",
"refsource": "MLIST",
"tags": [
"Patch"
],
"url": "http://openwall.com/lists/oss-security/2011/05/19/3"
},
{
"name": "[dovecot] 20110511 v2.0.13 released",
"refsource": "MLIST",
"tags": [
"Patch"
],
"url": "http://dovecot.org/pipermail/dovecot/2011-May/059085.html"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=706286",
"refsource": "CONFIRM",
"tags": [
"Patch"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=706286"
},
{
"name": "http://www.dovecot.org/doc/NEWS-2.0",
"refsource": "CONFIRM",
"tags": [],
"url": "http://www.dovecot.org/doc/NEWS-2.0"
},
{
"name": "47930",
"refsource": "BID",
"tags": [],
"url": "http://www.securityfocus.com/bid/47930"
},
{
"name": "[oss-security] 20110518 Dovecot releases",
"refsource": "MLIST",
"tags": [
"Patch"
],
"url": "http://openwall.com/lists/oss-security/2011/05/18/4"
},
{
"name": "[dovecot] 20110511 v1.2.17 released",
"refsource": "MLIST",
"tags": [
"Patch"
],
"url": "http://dovecot.org/pipermail/dovecot/2011-May/059086.html"
},
{
"name": "[oss-security] 20110519 Re: Dovecot releases",
"refsource": "MLIST",
"tags": [
"Patch"
],
"url": "http://openwall.com/lists/oss-security/2011/05/19/6"
},
{
"name": "http://www.dovecot.org/doc/NEWS-1.2",
"refsource": "CONFIRM",
"tags": [],
"url": "http://www.dovecot.org/doc/NEWS-1.2"
},
{
"name": "http://hg.dovecot.org/dovecot-1.1/rev/3698dfe0f21c",
"refsource": "CONFIRM",
"tags": [
"Patch"
],
"url": "http://hg.dovecot.org/dovecot-1.1/rev/3698dfe0f21c"
},
{
"name": "44827",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/44827"
},
{
"name": "openSUSE-SU-2011:0540",
"refsource": "SUSE",
"tags": [],
"url": "https://hermes.opensuse.org/messages/8581790"
},
{
"name": "72495",
"refsource": "OSVDB",
"tags": [],
"url": "http://osvdb.org/72495"
},
{
"name": "44712",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/44712"
},
{
"name": "MDVSA-2011:101",
"refsource": "MANDRIVA",
"tags": [],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:101"
},
{
"name": "USN-1143-1",
"refsource": "UBUNTU",
"tags": [],
"url": "http://www.ubuntu.com/usn/USN-1143-1"
},
{
"name": "FEDORA-2011-7258",
"refsource": "FEDORA",
"tags": [],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060815.html"
},
{
"name": "FEDORA-2011-7268",
"refsource": "FEDORA",
"tags": [],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060825.html"
},
{
"name": "44771",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/44771"
},
{
"name": "44756",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/44756"
},
{
"name": "DSA-2252",
"refsource": "DEBIAN",
"tags": [],
"url": "http://www.debian.org/security/2011/dsa-2252"
},
{
"name": "RHSA-2011:1187",
"refsource": "REDHAT",
"tags": [],
"url": "http://www.redhat.com/support/errata/RHSA-2011-1187.html"
},
{
"name": "44683",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/44683"
},
{
"name": "FEDORA-2011-7612",
"refsource": "FEDORA",
"tags": [],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061384.html"
},
{
"name": "dovecot-header-name-dos(67589)",
"refsource": "XF",
"tags": [],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67589"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2017-08-17T01:34Z",
"publishedDate": "2011-05-24T23:55Z"
}
}
}
rhsa-2011_1187
Vulnerability from csaf_redhat
Published
2011-08-18 19:42
Modified
2024-11-22 04:33
Summary
Red Hat Security Advisory: dovecot security update
Notes
Topic
Updated dovecot packages that fix one security issue are now available for
Red Hat Enterprise Linux 4, 5, and 6.
The Red Hat Security Response Team has rated this update as having moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.
Details
Dovecot is an IMAP server for Linux, UNIX, and similar operating systems,
primarily written with security in mind.
A denial of service flaw was found in the way Dovecot handled NULL
characters in certain header names. A mail message with specially-crafted
headers could cause the Dovecot child process handling the target user's
connection to crash, blocking them from downloading the message
successfully and possibly leading to the corruption of their mailbox.
(CVE-2011-1929)
Users of dovecot are advised to upgrade to these updated packages, which
contain a backported patch to resolve this issue. After installing the
updated packages, the dovecot service will be restarted automatically.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated dovecot packages that fix one security issue are now available for\nRed Hat Enterprise Linux 4, 5, and 6.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available from the CVE link in\nthe References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Dovecot is an IMAP server for Linux, UNIX, and similar operating systems,\nprimarily written with security in mind.\n\nA denial of service flaw was found in the way Dovecot handled NULL\ncharacters in certain header names. A mail message with specially-crafted\nheaders could cause the Dovecot child process handling the target user\u0027s\nconnection to crash, blocking them from downloading the message\nsuccessfully and possibly leading to the corruption of their mailbox.\n(CVE-2011-1929)\n\nUsers of dovecot are advised to upgrade to these updated packages, which\ncontain a backported patch to resolve this issue. After installing the\nupdated packages, the dovecot service will be restarted automatically.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2011:1187",
"url": "https://access.redhat.com/errata/RHSA-2011:1187"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "706286",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=706286"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1187.json"
}
],
"title": "Red Hat Security Advisory: dovecot security update",
"tracking": {
"current_release_date": "2024-11-22T04:33:52+00:00",
"generator": {
"date": "2024-11-22T04:33:52+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2011:1187",
"initial_release_date": "2011-08-18T19:42:00+00:00",
"revision_history": [
{
"date": "2011-08-18T19:42:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2011-08-18T15:52:19+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T04:33:52+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 4",
"product": {
"name": "Red Hat Enterprise Linux AS version 4",
"product_id": "4AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop version 4",
"product": {
"name": "Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 4",
"product": {
"name": "Red Hat Enterprise Linux ES version 4",
"product_id": "4ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 4",
"product": {
"name": "Red Hat Enterprise Linux WS version 4",
"product_id": "4WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
}
}
},
{
"category": "product_name",
"name": "RHEL Desktop Workstation (v. 5 client)",
"product": {
"name": "RHEL Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.7.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client_workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product": {
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.7.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "dovecot-0:0.99.11-10.EL4.ia64",
"product": {
"name": "dovecot-0:0.99.11-10.EL4.ia64",
"product_id": "dovecot-0:0.99.11-10.EL4.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot@0.99.11-10.EL4?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.ia64",
"product": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.ia64",
"product_id": "dovecot-debuginfo-0:0.99.11-10.EL4.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-debuginfo@0.99.11-10.EL4?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.ia64",
"product": {
"name": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.ia64",
"product_id": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-debuginfo@1.0.7-7.el5_7.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "dovecot-0:1.0.7-7.el5_7.1.ia64",
"product": {
"name": "dovecot-0:1.0.7-7.el5_7.1.ia64",
"product_id": "dovecot-0:1.0.7-7.el5_7.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot@1.0.7-7.el5_7.1?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "dovecot-0:0.99.11-10.EL4.src",
"product": {
"name": "dovecot-0:0.99.11-10.EL4.src",
"product_id": "dovecot-0:0.99.11-10.EL4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot@0.99.11-10.EL4?arch=src"
}
}
},
{
"category": "product_version",
"name": "dovecot-0:1.0.7-7.el5_7.1.src",
"product": {
"name": "dovecot-0:1.0.7-7.el5_7.1.src",
"product_id": "dovecot-0:1.0.7-7.el5_7.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot@1.0.7-7.el5_7.1?arch=src"
}
}
},
{
"category": "product_version",
"name": "dovecot-1:2.0.9-2.el6_1.1.src",
"product": {
"name": "dovecot-1:2.0.9-2.el6_1.1.src",
"product_id": "dovecot-1:2.0.9-2.el6_1.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot@2.0.9-2.el6_1.1?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "dovecot-0:0.99.11-10.EL4.x86_64",
"product": {
"name": "dovecot-0:0.99.11-10.EL4.x86_64",
"product_id": "dovecot-0:0.99.11-10.EL4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot@0.99.11-10.EL4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.x86_64",
"product": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.x86_64",
"product_id": "dovecot-debuginfo-0:0.99.11-10.EL4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-debuginfo@0.99.11-10.EL4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.x86_64",
"product": {
"name": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.x86_64",
"product_id": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-debuginfo@1.0.7-7.el5_7.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dovecot-0:1.0.7-7.el5_7.1.x86_64",
"product": {
"name": "dovecot-0:1.0.7-7.el5_7.1.x86_64",
"product_id": "dovecot-0:1.0.7-7.el5_7.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot@1.0.7-7.el5_7.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.x86_64",
"product": {
"name": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.x86_64",
"product_id": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-debuginfo@2.0.9-2.el6_1.1?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "dovecot-devel-1:2.0.9-2.el6_1.1.x86_64",
"product": {
"name": "dovecot-devel-1:2.0.9-2.el6_1.1.x86_64",
"product_id": "dovecot-devel-1:2.0.9-2.el6_1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-devel@2.0.9-2.el6_1.1?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.x86_64",
"product": {
"name": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.x86_64",
"product_id": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-pigeonhole@2.0.9-2.el6_1.1?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "dovecot-1:2.0.9-2.el6_1.1.x86_64",
"product": {
"name": "dovecot-1:2.0.9-2.el6_1.1.x86_64",
"product_id": "dovecot-1:2.0.9-2.el6_1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot@2.0.9-2.el6_1.1?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "dovecot-mysql-1:2.0.9-2.el6_1.1.x86_64",
"product": {
"name": "dovecot-mysql-1:2.0.9-2.el6_1.1.x86_64",
"product_id": "dovecot-mysql-1:2.0.9-2.el6_1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-mysql@2.0.9-2.el6_1.1?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "dovecot-pgsql-1:2.0.9-2.el6_1.1.x86_64",
"product": {
"name": "dovecot-pgsql-1:2.0.9-2.el6_1.1.x86_64",
"product_id": "dovecot-pgsql-1:2.0.9-2.el6_1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-pgsql@2.0.9-2.el6_1.1?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "dovecot-0:0.99.11-10.EL4.i386",
"product": {
"name": "dovecot-0:0.99.11-10.EL4.i386",
"product_id": "dovecot-0:0.99.11-10.EL4.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot@0.99.11-10.EL4?arch=i386"
}
}
},
{
"category": "product_version",
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.i386",
"product": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.i386",
"product_id": "dovecot-debuginfo-0:0.99.11-10.EL4.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-debuginfo@0.99.11-10.EL4?arch=i386"
}
}
},
{
"category": "product_version",
"name": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.i386",
"product": {
"name": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.i386",
"product_id": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-debuginfo@1.0.7-7.el5_7.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "dovecot-0:1.0.7-7.el5_7.1.i386",
"product": {
"name": "dovecot-0:1.0.7-7.el5_7.1.i386",
"product_id": "dovecot-0:1.0.7-7.el5_7.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot@1.0.7-7.el5_7.1?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "dovecot-0:0.99.11-10.EL4.ppc",
"product": {
"name": "dovecot-0:0.99.11-10.EL4.ppc",
"product_id": "dovecot-0:0.99.11-10.EL4.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot@0.99.11-10.EL4?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.ppc",
"product": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.ppc",
"product_id": "dovecot-debuginfo-0:0.99.11-10.EL4.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-debuginfo@0.99.11-10.EL4?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.ppc",
"product": {
"name": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.ppc",
"product_id": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-debuginfo@1.0.7-7.el5_7.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "dovecot-0:1.0.7-7.el5_7.1.ppc",
"product": {
"name": "dovecot-0:1.0.7-7.el5_7.1.ppc",
"product_id": "dovecot-0:1.0.7-7.el5_7.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot@1.0.7-7.el5_7.1?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc",
"product": {
"name": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc",
"product_id": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-debuginfo@2.0.9-2.el6_1.1?arch=ppc\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "dovecot-1:2.0.9-2.el6_1.1.ppc",
"product": {
"name": "dovecot-1:2.0.9-2.el6_1.1.ppc",
"product_id": "dovecot-1:2.0.9-2.el6_1.1.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot@2.0.9-2.el6_1.1?arch=ppc\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "dovecot-0:0.99.11-10.EL4.s390x",
"product": {
"name": "dovecot-0:0.99.11-10.EL4.s390x",
"product_id": "dovecot-0:0.99.11-10.EL4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot@0.99.11-10.EL4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.s390x",
"product": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.s390x",
"product_id": "dovecot-debuginfo-0:0.99.11-10.EL4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-debuginfo@0.99.11-10.EL4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.s390x",
"product": {
"name": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.s390x",
"product_id": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-debuginfo@1.0.7-7.el5_7.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dovecot-0:1.0.7-7.el5_7.1.s390x",
"product": {
"name": "dovecot-0:1.0.7-7.el5_7.1.s390x",
"product_id": "dovecot-0:1.0.7-7.el5_7.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot@1.0.7-7.el5_7.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390x",
"product": {
"name": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390x",
"product_id": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-debuginfo@2.0.9-2.el6_1.1?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "dovecot-devel-1:2.0.9-2.el6_1.1.s390x",
"product": {
"name": "dovecot-devel-1:2.0.9-2.el6_1.1.s390x",
"product_id": "dovecot-devel-1:2.0.9-2.el6_1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-devel@2.0.9-2.el6_1.1?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.s390x",
"product": {
"name": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.s390x",
"product_id": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-pigeonhole@2.0.9-2.el6_1.1?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "dovecot-1:2.0.9-2.el6_1.1.s390x",
"product": {
"name": "dovecot-1:2.0.9-2.el6_1.1.s390x",
"product_id": "dovecot-1:2.0.9-2.el6_1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot@2.0.9-2.el6_1.1?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "dovecot-mysql-1:2.0.9-2.el6_1.1.s390x",
"product": {
"name": "dovecot-mysql-1:2.0.9-2.el6_1.1.s390x",
"product_id": "dovecot-mysql-1:2.0.9-2.el6_1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-mysql@2.0.9-2.el6_1.1?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "dovecot-pgsql-1:2.0.9-2.el6_1.1.s390x",
"product": {
"name": "dovecot-pgsql-1:2.0.9-2.el6_1.1.s390x",
"product_id": "dovecot-pgsql-1:2.0.9-2.el6_1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-pgsql@2.0.9-2.el6_1.1?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "dovecot-0:0.99.11-10.EL4.s390",
"product": {
"name": "dovecot-0:0.99.11-10.EL4.s390",
"product_id": "dovecot-0:0.99.11-10.EL4.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot@0.99.11-10.EL4?arch=s390"
}
}
},
{
"category": "product_version",
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.s390",
"product": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.s390",
"product_id": "dovecot-debuginfo-0:0.99.11-10.EL4.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-debuginfo@0.99.11-10.EL4?arch=s390"
}
}
},
{
"category": "product_version",
"name": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390",
"product": {
"name": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390",
"product_id": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-debuginfo@2.0.9-2.el6_1.1?arch=s390\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "dovecot-1:2.0.9-2.el6_1.1.s390",
"product": {
"name": "dovecot-1:2.0.9-2.el6_1.1.s390",
"product_id": "dovecot-1:2.0.9-2.el6_1.1.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot@2.0.9-2.el6_1.1?arch=s390\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.i686",
"product": {
"name": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.i686",
"product_id": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-debuginfo@2.0.9-2.el6_1.1?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "dovecot-devel-1:2.0.9-2.el6_1.1.i686",
"product": {
"name": "dovecot-devel-1:2.0.9-2.el6_1.1.i686",
"product_id": "dovecot-devel-1:2.0.9-2.el6_1.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-devel@2.0.9-2.el6_1.1?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.i686",
"product": {
"name": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.i686",
"product_id": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-pigeonhole@2.0.9-2.el6_1.1?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "dovecot-1:2.0.9-2.el6_1.1.i686",
"product": {
"name": "dovecot-1:2.0.9-2.el6_1.1.i686",
"product_id": "dovecot-1:2.0.9-2.el6_1.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot@2.0.9-2.el6_1.1?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "dovecot-mysql-1:2.0.9-2.el6_1.1.i686",
"product": {
"name": "dovecot-mysql-1:2.0.9-2.el6_1.1.i686",
"product_id": "dovecot-mysql-1:2.0.9-2.el6_1.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-mysql@2.0.9-2.el6_1.1?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "dovecot-pgsql-1:2.0.9-2.el6_1.1.i686",
"product": {
"name": "dovecot-pgsql-1:2.0.9-2.el6_1.1.i686",
"product_id": "dovecot-pgsql-1:2.0.9-2.el6_1.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-pgsql@2.0.9-2.el6_1.1?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc64",
"product": {
"name": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc64",
"product_id": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-debuginfo@2.0.9-2.el6_1.1?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "dovecot-devel-1:2.0.9-2.el6_1.1.ppc64",
"product": {
"name": "dovecot-devel-1:2.0.9-2.el6_1.1.ppc64",
"product_id": "dovecot-devel-1:2.0.9-2.el6_1.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-devel@2.0.9-2.el6_1.1?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.ppc64",
"product": {
"name": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.ppc64",
"product_id": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-pigeonhole@2.0.9-2.el6_1.1?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "dovecot-1:2.0.9-2.el6_1.1.ppc64",
"product": {
"name": "dovecot-1:2.0.9-2.el6_1.1.ppc64",
"product_id": "dovecot-1:2.0.9-2.el6_1.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot@2.0.9-2.el6_1.1?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "dovecot-mysql-1:2.0.9-2.el6_1.1.ppc64",
"product": {
"name": "dovecot-mysql-1:2.0.9-2.el6_1.1.ppc64",
"product_id": "dovecot-mysql-1:2.0.9-2.el6_1.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-mysql@2.0.9-2.el6_1.1?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "dovecot-pgsql-1:2.0.9-2.el6_1.1.ppc64",
"product": {
"name": "dovecot-pgsql-1:2.0.9-2.el6_1.1.ppc64",
"product_id": "dovecot-pgsql-1:2.0.9-2.el6_1.1.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dovecot-pgsql@2.0.9-2.el6_1.1?arch=ppc64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:dovecot-0:0.99.11-10.EL4.i386"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:dovecot-0:0.99.11-10.EL4.ia64"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:dovecot-0:0.99.11-10.EL4.ppc"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:dovecot-0:0.99.11-10.EL4.s390"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:dovecot-0:0.99.11-10.EL4.s390x"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.src as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:dovecot-0:0.99.11-10.EL4.src"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.src",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:dovecot-0:0.99.11-10.EL4.x86_64"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:dovecot-debuginfo-0:0.99.11-10.EL4.i386"
},
"product_reference": "dovecot-debuginfo-0:0.99.11-10.EL4.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:dovecot-debuginfo-0:0.99.11-10.EL4.ia64"
},
"product_reference": "dovecot-debuginfo-0:0.99.11-10.EL4.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:dovecot-debuginfo-0:0.99.11-10.EL4.ppc"
},
"product_reference": "dovecot-debuginfo-0:0.99.11-10.EL4.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:dovecot-debuginfo-0:0.99.11-10.EL4.s390"
},
"product_reference": "dovecot-debuginfo-0:0.99.11-10.EL4.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:dovecot-debuginfo-0:0.99.11-10.EL4.s390x"
},
"product_reference": "dovecot-debuginfo-0:0.99.11-10.EL4.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:dovecot-debuginfo-0:0.99.11-10.EL4.x86_64"
},
"product_reference": "dovecot-debuginfo-0:0.99.11-10.EL4.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:dovecot-0:0.99.11-10.EL4.i386"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:dovecot-0:0.99.11-10.EL4.ia64"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:dovecot-0:0.99.11-10.EL4.ppc"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:dovecot-0:0.99.11-10.EL4.s390"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:dovecot-0:0.99.11-10.EL4.s390x"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.src as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:dovecot-0:0.99.11-10.EL4.src"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.src",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:dovecot-0:0.99.11-10.EL4.x86_64"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:dovecot-debuginfo-0:0.99.11-10.EL4.i386"
},
"product_reference": "dovecot-debuginfo-0:0.99.11-10.EL4.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:dovecot-debuginfo-0:0.99.11-10.EL4.ia64"
},
"product_reference": "dovecot-debuginfo-0:0.99.11-10.EL4.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:dovecot-debuginfo-0:0.99.11-10.EL4.ppc"
},
"product_reference": "dovecot-debuginfo-0:0.99.11-10.EL4.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:dovecot-debuginfo-0:0.99.11-10.EL4.s390"
},
"product_reference": "dovecot-debuginfo-0:0.99.11-10.EL4.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:dovecot-debuginfo-0:0.99.11-10.EL4.s390x"
},
"product_reference": "dovecot-debuginfo-0:0.99.11-10.EL4.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:dovecot-debuginfo-0:0.99.11-10.EL4.x86_64"
},
"product_reference": "dovecot-debuginfo-0:0.99.11-10.EL4.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:dovecot-0:0.99.11-10.EL4.i386"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:dovecot-0:0.99.11-10.EL4.ia64"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:dovecot-0:0.99.11-10.EL4.ppc"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:dovecot-0:0.99.11-10.EL4.s390"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:dovecot-0:0.99.11-10.EL4.s390x"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.src as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:dovecot-0:0.99.11-10.EL4.src"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.src",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:dovecot-0:0.99.11-10.EL4.x86_64"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:dovecot-debuginfo-0:0.99.11-10.EL4.i386"
},
"product_reference": "dovecot-debuginfo-0:0.99.11-10.EL4.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:dovecot-debuginfo-0:0.99.11-10.EL4.ia64"
},
"product_reference": "dovecot-debuginfo-0:0.99.11-10.EL4.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:dovecot-debuginfo-0:0.99.11-10.EL4.ppc"
},
"product_reference": "dovecot-debuginfo-0:0.99.11-10.EL4.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:dovecot-debuginfo-0:0.99.11-10.EL4.s390"
},
"product_reference": "dovecot-debuginfo-0:0.99.11-10.EL4.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:dovecot-debuginfo-0:0.99.11-10.EL4.s390x"
},
"product_reference": "dovecot-debuginfo-0:0.99.11-10.EL4.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:dovecot-debuginfo-0:0.99.11-10.EL4.x86_64"
},
"product_reference": "dovecot-debuginfo-0:0.99.11-10.EL4.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:dovecot-0:0.99.11-10.EL4.i386"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:dovecot-0:0.99.11-10.EL4.ia64"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:dovecot-0:0.99.11-10.EL4.ppc"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:dovecot-0:0.99.11-10.EL4.s390"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:dovecot-0:0.99.11-10.EL4.s390x"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.src as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:dovecot-0:0.99.11-10.EL4.src"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.src",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:0.99.11-10.EL4.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:dovecot-0:0.99.11-10.EL4.x86_64"
},
"product_reference": "dovecot-0:0.99.11-10.EL4.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:dovecot-debuginfo-0:0.99.11-10.EL4.i386"
},
"product_reference": "dovecot-debuginfo-0:0.99.11-10.EL4.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:dovecot-debuginfo-0:0.99.11-10.EL4.ia64"
},
"product_reference": "dovecot-debuginfo-0:0.99.11-10.EL4.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:dovecot-debuginfo-0:0.99.11-10.EL4.ppc"
},
"product_reference": "dovecot-debuginfo-0:0.99.11-10.EL4.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:dovecot-debuginfo-0:0.99.11-10.EL4.s390"
},
"product_reference": "dovecot-debuginfo-0:0.99.11-10.EL4.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:dovecot-debuginfo-0:0.99.11-10.EL4.s390x"
},
"product_reference": "dovecot-debuginfo-0:0.99.11-10.EL4.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:0.99.11-10.EL4.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:dovecot-debuginfo-0:0.99.11-10.EL4.x86_64"
},
"product_reference": "dovecot-debuginfo-0:0.99.11-10.EL4.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:1.0.7-7.el5_7.1.i386 as a component of RHEL Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.i386"
},
"product_reference": "dovecot-0:1.0.7-7.el5_7.1.i386",
"relates_to_product_reference": "5Client-Workstation-5.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:1.0.7-7.el5_7.1.ia64 as a component of RHEL Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.ia64"
},
"product_reference": "dovecot-0:1.0.7-7.el5_7.1.ia64",
"relates_to_product_reference": "5Client-Workstation-5.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:1.0.7-7.el5_7.1.ppc as a component of RHEL Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.ppc"
},
"product_reference": "dovecot-0:1.0.7-7.el5_7.1.ppc",
"relates_to_product_reference": "5Client-Workstation-5.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:1.0.7-7.el5_7.1.s390x as a component of RHEL Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.s390x"
},
"product_reference": "dovecot-0:1.0.7-7.el5_7.1.s390x",
"relates_to_product_reference": "5Client-Workstation-5.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:1.0.7-7.el5_7.1.src as a component of RHEL Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.src"
},
"product_reference": "dovecot-0:1.0.7-7.el5_7.1.src",
"relates_to_product_reference": "5Client-Workstation-5.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:1.0.7-7.el5_7.1.x86_64 as a component of RHEL Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.x86_64"
},
"product_reference": "dovecot-0:1.0.7-7.el5_7.1.x86_64",
"relates_to_product_reference": "5Client-Workstation-5.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.i386 as a component of RHEL Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.i386"
},
"product_reference": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.i386",
"relates_to_product_reference": "5Client-Workstation-5.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.ia64 as a component of RHEL Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.ia64"
},
"product_reference": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.ia64",
"relates_to_product_reference": "5Client-Workstation-5.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.ppc as a component of RHEL Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.ppc"
},
"product_reference": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.ppc",
"relates_to_product_reference": "5Client-Workstation-5.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.s390x as a component of RHEL Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.s390x"
},
"product_reference": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.s390x",
"relates_to_product_reference": "5Client-Workstation-5.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.x86_64 as a component of RHEL Desktop Workstation (v. 5 client)",
"product_id": "5Client-Workstation-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.x86_64"
},
"product_reference": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.x86_64",
"relates_to_product_reference": "5Client-Workstation-5.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:1.0.7-7.el5_7.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.i386"
},
"product_reference": "dovecot-0:1.0.7-7.el5_7.1.i386",
"relates_to_product_reference": "5Server-5.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:1.0.7-7.el5_7.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.ia64"
},
"product_reference": "dovecot-0:1.0.7-7.el5_7.1.ia64",
"relates_to_product_reference": "5Server-5.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:1.0.7-7.el5_7.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.ppc"
},
"product_reference": "dovecot-0:1.0.7-7.el5_7.1.ppc",
"relates_to_product_reference": "5Server-5.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:1.0.7-7.el5_7.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.s390x"
},
"product_reference": "dovecot-0:1.0.7-7.el5_7.1.s390x",
"relates_to_product_reference": "5Server-5.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:1.0.7-7.el5_7.1.src as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.src"
},
"product_reference": "dovecot-0:1.0.7-7.el5_7.1.src",
"relates_to_product_reference": "5Server-5.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-0:1.0.7-7.el5_7.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.x86_64"
},
"product_reference": "dovecot-0:1.0.7-7.el5_7.1.x86_64",
"relates_to_product_reference": "5Server-5.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.i386"
},
"product_reference": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.i386",
"relates_to_product_reference": "5Server-5.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.ia64"
},
"product_reference": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.ia64",
"relates_to_product_reference": "5Server-5.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.ppc"
},
"product_reference": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.ppc",
"relates_to_product_reference": "5Server-5.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.s390x"
},
"product_reference": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.s390x",
"relates_to_product_reference": "5Server-5.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.x86_64"
},
"product_reference": "dovecot-debuginfo-0:1.0.7-7.el5_7.1.x86_64",
"relates_to_product_reference": "5Server-5.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-1:2.0.9-2.el6_1.1.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.i686"
},
"product_reference": "dovecot-1:2.0.9-2.el6_1.1.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-1:2.0.9-2.el6_1.1.ppc as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.ppc"
},
"product_reference": "dovecot-1:2.0.9-2.el6_1.1.ppc",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-1:2.0.9-2.el6_1.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.ppc64"
},
"product_reference": "dovecot-1:2.0.9-2.el6_1.1.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-1:2.0.9-2.el6_1.1.s390 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.s390"
},
"product_reference": "dovecot-1:2.0.9-2.el6_1.1.s390",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-1:2.0.9-2.el6_1.1.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.s390x"
},
"product_reference": "dovecot-1:2.0.9-2.el6_1.1.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-1:2.0.9-2.el6_1.1.src as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.src"
},
"product_reference": "dovecot-1:2.0.9-2.el6_1.1.src",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-1:2.0.9-2.el6_1.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.x86_64"
},
"product_reference": "dovecot-1:2.0.9-2.el6_1.1.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.i686"
},
"product_reference": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc"
},
"product_reference": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc64"
},
"product_reference": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390"
},
"product_reference": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390x"
},
"product_reference": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.x86_64"
},
"product_reference": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-devel-1:2.0.9-2.el6_1.1.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.i686"
},
"product_reference": "dovecot-devel-1:2.0.9-2.el6_1.1.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-devel-1:2.0.9-2.el6_1.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.ppc64"
},
"product_reference": "dovecot-devel-1:2.0.9-2.el6_1.1.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-devel-1:2.0.9-2.el6_1.1.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.s390x"
},
"product_reference": "dovecot-devel-1:2.0.9-2.el6_1.1.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-devel-1:2.0.9-2.el6_1.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.x86_64"
},
"product_reference": "dovecot-devel-1:2.0.9-2.el6_1.1.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-mysql-1:2.0.9-2.el6_1.1.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.i686"
},
"product_reference": "dovecot-mysql-1:2.0.9-2.el6_1.1.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-mysql-1:2.0.9-2.el6_1.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.ppc64"
},
"product_reference": "dovecot-mysql-1:2.0.9-2.el6_1.1.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-mysql-1:2.0.9-2.el6_1.1.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.s390x"
},
"product_reference": "dovecot-mysql-1:2.0.9-2.el6_1.1.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-mysql-1:2.0.9-2.el6_1.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.x86_64"
},
"product_reference": "dovecot-mysql-1:2.0.9-2.el6_1.1.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-pgsql-1:2.0.9-2.el6_1.1.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.i686"
},
"product_reference": "dovecot-pgsql-1:2.0.9-2.el6_1.1.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-pgsql-1:2.0.9-2.el6_1.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.ppc64"
},
"product_reference": "dovecot-pgsql-1:2.0.9-2.el6_1.1.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-pgsql-1:2.0.9-2.el6_1.1.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.s390x"
},
"product_reference": "dovecot-pgsql-1:2.0.9-2.el6_1.1.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-pgsql-1:2.0.9-2.el6_1.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.x86_64"
},
"product_reference": "dovecot-pgsql-1:2.0.9-2.el6_1.1.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.i686"
},
"product_reference": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.ppc64"
},
"product_reference": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.s390x"
},
"product_reference": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.x86_64"
},
"product_reference": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-1:2.0.9-2.el6_1.1.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.i686"
},
"product_reference": "dovecot-1:2.0.9-2.el6_1.1.i686",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-1:2.0.9-2.el6_1.1.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.ppc"
},
"product_reference": "dovecot-1:2.0.9-2.el6_1.1.ppc",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-1:2.0.9-2.el6_1.1.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.ppc64"
},
"product_reference": "dovecot-1:2.0.9-2.el6_1.1.ppc64",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-1:2.0.9-2.el6_1.1.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.s390"
},
"product_reference": "dovecot-1:2.0.9-2.el6_1.1.s390",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-1:2.0.9-2.el6_1.1.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.s390x"
},
"product_reference": "dovecot-1:2.0.9-2.el6_1.1.s390x",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-1:2.0.9-2.el6_1.1.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.src"
},
"product_reference": "dovecot-1:2.0.9-2.el6_1.1.src",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-1:2.0.9-2.el6_1.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.x86_64"
},
"product_reference": "dovecot-1:2.0.9-2.el6_1.1.x86_64",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.i686"
},
"product_reference": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.i686",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc"
},
"product_reference": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc64"
},
"product_reference": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc64",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390"
},
"product_reference": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390x"
},
"product_reference": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390x",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.x86_64"
},
"product_reference": "dovecot-debuginfo-1:2.0.9-2.el6_1.1.x86_64",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-devel-1:2.0.9-2.el6_1.1.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.i686"
},
"product_reference": "dovecot-devel-1:2.0.9-2.el6_1.1.i686",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-devel-1:2.0.9-2.el6_1.1.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.ppc64"
},
"product_reference": "dovecot-devel-1:2.0.9-2.el6_1.1.ppc64",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-devel-1:2.0.9-2.el6_1.1.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.s390x"
},
"product_reference": "dovecot-devel-1:2.0.9-2.el6_1.1.s390x",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-devel-1:2.0.9-2.el6_1.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.x86_64"
},
"product_reference": "dovecot-devel-1:2.0.9-2.el6_1.1.x86_64",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-mysql-1:2.0.9-2.el6_1.1.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.i686"
},
"product_reference": "dovecot-mysql-1:2.0.9-2.el6_1.1.i686",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-mysql-1:2.0.9-2.el6_1.1.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.ppc64"
},
"product_reference": "dovecot-mysql-1:2.0.9-2.el6_1.1.ppc64",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-mysql-1:2.0.9-2.el6_1.1.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.s390x"
},
"product_reference": "dovecot-mysql-1:2.0.9-2.el6_1.1.s390x",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-mysql-1:2.0.9-2.el6_1.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.x86_64"
},
"product_reference": "dovecot-mysql-1:2.0.9-2.el6_1.1.x86_64",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-pgsql-1:2.0.9-2.el6_1.1.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.i686"
},
"product_reference": "dovecot-pgsql-1:2.0.9-2.el6_1.1.i686",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-pgsql-1:2.0.9-2.el6_1.1.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.ppc64"
},
"product_reference": "dovecot-pgsql-1:2.0.9-2.el6_1.1.ppc64",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-pgsql-1:2.0.9-2.el6_1.1.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.s390x"
},
"product_reference": "dovecot-pgsql-1:2.0.9-2.el6_1.1.s390x",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-pgsql-1:2.0.9-2.el6_1.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.x86_64"
},
"product_reference": "dovecot-pgsql-1:2.0.9-2.el6_1.1.x86_64",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.i686"
},
"product_reference": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.i686",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.ppc64"
},
"product_reference": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.ppc64",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.s390x"
},
"product_reference": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.s390x",
"relates_to_product_reference": "6Server-optional-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.x86_64"
},
"product_reference": "dovecot-pigeonhole-1:2.0.9-2.el6_1.1.x86_64",
"relates_to_product_reference": "6Server-optional-6.1.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2011-1929",
"discovery_date": "2011-05-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "706286"
}
],
"notes": [
{
"category": "description",
"text": "lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle \u0027\\0\u0027 characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dovecot: potential crash when parsing header names that contain NUL characters",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS:dovecot-0:0.99.11-10.EL4.i386",
"4AS:dovecot-0:0.99.11-10.EL4.ia64",
"4AS:dovecot-0:0.99.11-10.EL4.ppc",
"4AS:dovecot-0:0.99.11-10.EL4.s390",
"4AS:dovecot-0:0.99.11-10.EL4.s390x",
"4AS:dovecot-0:0.99.11-10.EL4.src",
"4AS:dovecot-0:0.99.11-10.EL4.x86_64",
"4AS:dovecot-debuginfo-0:0.99.11-10.EL4.i386",
"4AS:dovecot-debuginfo-0:0.99.11-10.EL4.ia64",
"4AS:dovecot-debuginfo-0:0.99.11-10.EL4.ppc",
"4AS:dovecot-debuginfo-0:0.99.11-10.EL4.s390",
"4AS:dovecot-debuginfo-0:0.99.11-10.EL4.s390x",
"4AS:dovecot-debuginfo-0:0.99.11-10.EL4.x86_64",
"4Desktop:dovecot-0:0.99.11-10.EL4.i386",
"4Desktop:dovecot-0:0.99.11-10.EL4.ia64",
"4Desktop:dovecot-0:0.99.11-10.EL4.ppc",
"4Desktop:dovecot-0:0.99.11-10.EL4.s390",
"4Desktop:dovecot-0:0.99.11-10.EL4.s390x",
"4Desktop:dovecot-0:0.99.11-10.EL4.src",
"4Desktop:dovecot-0:0.99.11-10.EL4.x86_64",
"4Desktop:dovecot-debuginfo-0:0.99.11-10.EL4.i386",
"4Desktop:dovecot-debuginfo-0:0.99.11-10.EL4.ia64",
"4Desktop:dovecot-debuginfo-0:0.99.11-10.EL4.ppc",
"4Desktop:dovecot-debuginfo-0:0.99.11-10.EL4.s390",
"4Desktop:dovecot-debuginfo-0:0.99.11-10.EL4.s390x",
"4Desktop:dovecot-debuginfo-0:0.99.11-10.EL4.x86_64",
"4ES:dovecot-0:0.99.11-10.EL4.i386",
"4ES:dovecot-0:0.99.11-10.EL4.ia64",
"4ES:dovecot-0:0.99.11-10.EL4.ppc",
"4ES:dovecot-0:0.99.11-10.EL4.s390",
"4ES:dovecot-0:0.99.11-10.EL4.s390x",
"4ES:dovecot-0:0.99.11-10.EL4.src",
"4ES:dovecot-0:0.99.11-10.EL4.x86_64",
"4ES:dovecot-debuginfo-0:0.99.11-10.EL4.i386",
"4ES:dovecot-debuginfo-0:0.99.11-10.EL4.ia64",
"4ES:dovecot-debuginfo-0:0.99.11-10.EL4.ppc",
"4ES:dovecot-debuginfo-0:0.99.11-10.EL4.s390",
"4ES:dovecot-debuginfo-0:0.99.11-10.EL4.s390x",
"4ES:dovecot-debuginfo-0:0.99.11-10.EL4.x86_64",
"4WS:dovecot-0:0.99.11-10.EL4.i386",
"4WS:dovecot-0:0.99.11-10.EL4.ia64",
"4WS:dovecot-0:0.99.11-10.EL4.ppc",
"4WS:dovecot-0:0.99.11-10.EL4.s390",
"4WS:dovecot-0:0.99.11-10.EL4.s390x",
"4WS:dovecot-0:0.99.11-10.EL4.src",
"4WS:dovecot-0:0.99.11-10.EL4.x86_64",
"4WS:dovecot-debuginfo-0:0.99.11-10.EL4.i386",
"4WS:dovecot-debuginfo-0:0.99.11-10.EL4.ia64",
"4WS:dovecot-debuginfo-0:0.99.11-10.EL4.ppc",
"4WS:dovecot-debuginfo-0:0.99.11-10.EL4.s390",
"4WS:dovecot-debuginfo-0:0.99.11-10.EL4.s390x",
"4WS:dovecot-debuginfo-0:0.99.11-10.EL4.x86_64",
"5Client-Workstation-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.i386",
"5Client-Workstation-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.ia64",
"5Client-Workstation-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.ppc",
"5Client-Workstation-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.s390x",
"5Client-Workstation-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.src",
"5Client-Workstation-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.x86_64",
"5Client-Workstation-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.i386",
"5Client-Workstation-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.ia64",
"5Client-Workstation-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.ppc",
"5Client-Workstation-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.s390x",
"5Client-Workstation-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.x86_64",
"5Server-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.i386",
"5Server-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.ia64",
"5Server-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.ppc",
"5Server-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.s390x",
"5Server-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.src",
"5Server-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.x86_64",
"5Server-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.i386",
"5Server-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.ia64",
"5Server-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.ppc",
"5Server-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.s390x",
"5Server-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.x86_64",
"6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.i686",
"6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.ppc",
"6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.ppc64",
"6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.s390",
"6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.s390x",
"6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.src",
"6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.x86_64",
"6Server-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.i686",
"6Server-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc",
"6Server-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc64",
"6Server-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390",
"6Server-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390x",
"6Server-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.x86_64",
"6Server-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.i686",
"6Server-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.ppc64",
"6Server-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.s390x",
"6Server-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.x86_64",
"6Server-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.i686",
"6Server-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.ppc64",
"6Server-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.s390x",
"6Server-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.x86_64",
"6Server-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.i686",
"6Server-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.ppc64",
"6Server-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.s390x",
"6Server-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.x86_64",
"6Server-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.i686",
"6Server-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.ppc64",
"6Server-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.s390x",
"6Server-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.x86_64",
"6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.i686",
"6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.ppc",
"6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.ppc64",
"6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.s390",
"6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.s390x",
"6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.src",
"6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.x86_64",
"6Server-optional-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.i686",
"6Server-optional-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc",
"6Server-optional-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc64",
"6Server-optional-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390",
"6Server-optional-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390x",
"6Server-optional-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.x86_64",
"6Server-optional-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.i686",
"6Server-optional-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.ppc64",
"6Server-optional-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.s390x",
"6Server-optional-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.x86_64",
"6Server-optional-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.i686",
"6Server-optional-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.ppc64",
"6Server-optional-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.s390x",
"6Server-optional-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.x86_64",
"6Server-optional-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.i686",
"6Server-optional-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.ppc64",
"6Server-optional-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.s390x",
"6Server-optional-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.x86_64",
"6Server-optional-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.i686",
"6Server-optional-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.ppc64",
"6Server-optional-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.s390x",
"6Server-optional-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-1929"
},
{
"category": "external",
"summary": "RHBZ#706286",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=706286"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-1929",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-1929"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-1929",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1929"
}
],
"release_date": "2011-05-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2011-08-18T19:42:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259",
"product_ids": [
"4AS:dovecot-0:0.99.11-10.EL4.i386",
"4AS:dovecot-0:0.99.11-10.EL4.ia64",
"4AS:dovecot-0:0.99.11-10.EL4.ppc",
"4AS:dovecot-0:0.99.11-10.EL4.s390",
"4AS:dovecot-0:0.99.11-10.EL4.s390x",
"4AS:dovecot-0:0.99.11-10.EL4.src",
"4AS:dovecot-0:0.99.11-10.EL4.x86_64",
"4AS:dovecot-debuginfo-0:0.99.11-10.EL4.i386",
"4AS:dovecot-debuginfo-0:0.99.11-10.EL4.ia64",
"4AS:dovecot-debuginfo-0:0.99.11-10.EL4.ppc",
"4AS:dovecot-debuginfo-0:0.99.11-10.EL4.s390",
"4AS:dovecot-debuginfo-0:0.99.11-10.EL4.s390x",
"4AS:dovecot-debuginfo-0:0.99.11-10.EL4.x86_64",
"4Desktop:dovecot-0:0.99.11-10.EL4.i386",
"4Desktop:dovecot-0:0.99.11-10.EL4.ia64",
"4Desktop:dovecot-0:0.99.11-10.EL4.ppc",
"4Desktop:dovecot-0:0.99.11-10.EL4.s390",
"4Desktop:dovecot-0:0.99.11-10.EL4.s390x",
"4Desktop:dovecot-0:0.99.11-10.EL4.src",
"4Desktop:dovecot-0:0.99.11-10.EL4.x86_64",
"4Desktop:dovecot-debuginfo-0:0.99.11-10.EL4.i386",
"4Desktop:dovecot-debuginfo-0:0.99.11-10.EL4.ia64",
"4Desktop:dovecot-debuginfo-0:0.99.11-10.EL4.ppc",
"4Desktop:dovecot-debuginfo-0:0.99.11-10.EL4.s390",
"4Desktop:dovecot-debuginfo-0:0.99.11-10.EL4.s390x",
"4Desktop:dovecot-debuginfo-0:0.99.11-10.EL4.x86_64",
"4ES:dovecot-0:0.99.11-10.EL4.i386",
"4ES:dovecot-0:0.99.11-10.EL4.ia64",
"4ES:dovecot-0:0.99.11-10.EL4.ppc",
"4ES:dovecot-0:0.99.11-10.EL4.s390",
"4ES:dovecot-0:0.99.11-10.EL4.s390x",
"4ES:dovecot-0:0.99.11-10.EL4.src",
"4ES:dovecot-0:0.99.11-10.EL4.x86_64",
"4ES:dovecot-debuginfo-0:0.99.11-10.EL4.i386",
"4ES:dovecot-debuginfo-0:0.99.11-10.EL4.ia64",
"4ES:dovecot-debuginfo-0:0.99.11-10.EL4.ppc",
"4ES:dovecot-debuginfo-0:0.99.11-10.EL4.s390",
"4ES:dovecot-debuginfo-0:0.99.11-10.EL4.s390x",
"4ES:dovecot-debuginfo-0:0.99.11-10.EL4.x86_64",
"4WS:dovecot-0:0.99.11-10.EL4.i386",
"4WS:dovecot-0:0.99.11-10.EL4.ia64",
"4WS:dovecot-0:0.99.11-10.EL4.ppc",
"4WS:dovecot-0:0.99.11-10.EL4.s390",
"4WS:dovecot-0:0.99.11-10.EL4.s390x",
"4WS:dovecot-0:0.99.11-10.EL4.src",
"4WS:dovecot-0:0.99.11-10.EL4.x86_64",
"4WS:dovecot-debuginfo-0:0.99.11-10.EL4.i386",
"4WS:dovecot-debuginfo-0:0.99.11-10.EL4.ia64",
"4WS:dovecot-debuginfo-0:0.99.11-10.EL4.ppc",
"4WS:dovecot-debuginfo-0:0.99.11-10.EL4.s390",
"4WS:dovecot-debuginfo-0:0.99.11-10.EL4.s390x",
"4WS:dovecot-debuginfo-0:0.99.11-10.EL4.x86_64",
"5Client-Workstation-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.i386",
"5Client-Workstation-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.ia64",
"5Client-Workstation-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.ppc",
"5Client-Workstation-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.s390x",
"5Client-Workstation-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.src",
"5Client-Workstation-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.x86_64",
"5Client-Workstation-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.i386",
"5Client-Workstation-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.ia64",
"5Client-Workstation-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.ppc",
"5Client-Workstation-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.s390x",
"5Client-Workstation-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.x86_64",
"5Server-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.i386",
"5Server-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.ia64",
"5Server-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.ppc",
"5Server-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.s390x",
"5Server-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.src",
"5Server-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.x86_64",
"5Server-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.i386",
"5Server-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.ia64",
"5Server-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.ppc",
"5Server-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.s390x",
"5Server-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.x86_64",
"6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.i686",
"6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.ppc",
"6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.ppc64",
"6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.s390",
"6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.s390x",
"6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.src",
"6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.x86_64",
"6Server-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.i686",
"6Server-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc",
"6Server-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc64",
"6Server-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390",
"6Server-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390x",
"6Server-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.x86_64",
"6Server-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.i686",
"6Server-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.ppc64",
"6Server-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.s390x",
"6Server-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.x86_64",
"6Server-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.i686",
"6Server-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.ppc64",
"6Server-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.s390x",
"6Server-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.x86_64",
"6Server-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.i686",
"6Server-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.ppc64",
"6Server-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.s390x",
"6Server-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.x86_64",
"6Server-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.i686",
"6Server-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.ppc64",
"6Server-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.s390x",
"6Server-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.x86_64",
"6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.i686",
"6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.ppc",
"6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.ppc64",
"6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.s390",
"6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.s390x",
"6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.src",
"6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.x86_64",
"6Server-optional-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.i686",
"6Server-optional-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc",
"6Server-optional-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc64",
"6Server-optional-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390",
"6Server-optional-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390x",
"6Server-optional-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.x86_64",
"6Server-optional-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.i686",
"6Server-optional-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.ppc64",
"6Server-optional-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.s390x",
"6Server-optional-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.x86_64",
"6Server-optional-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.i686",
"6Server-optional-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.ppc64",
"6Server-optional-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.s390x",
"6Server-optional-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.x86_64",
"6Server-optional-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.i686",
"6Server-optional-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.ppc64",
"6Server-optional-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.s390x",
"6Server-optional-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.x86_64",
"6Server-optional-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.i686",
"6Server-optional-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.ppc64",
"6Server-optional-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.s390x",
"6Server-optional-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1187"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"4AS:dovecot-0:0.99.11-10.EL4.i386",
"4AS:dovecot-0:0.99.11-10.EL4.ia64",
"4AS:dovecot-0:0.99.11-10.EL4.ppc",
"4AS:dovecot-0:0.99.11-10.EL4.s390",
"4AS:dovecot-0:0.99.11-10.EL4.s390x",
"4AS:dovecot-0:0.99.11-10.EL4.src",
"4AS:dovecot-0:0.99.11-10.EL4.x86_64",
"4AS:dovecot-debuginfo-0:0.99.11-10.EL4.i386",
"4AS:dovecot-debuginfo-0:0.99.11-10.EL4.ia64",
"4AS:dovecot-debuginfo-0:0.99.11-10.EL4.ppc",
"4AS:dovecot-debuginfo-0:0.99.11-10.EL4.s390",
"4AS:dovecot-debuginfo-0:0.99.11-10.EL4.s390x",
"4AS:dovecot-debuginfo-0:0.99.11-10.EL4.x86_64",
"4Desktop:dovecot-0:0.99.11-10.EL4.i386",
"4Desktop:dovecot-0:0.99.11-10.EL4.ia64",
"4Desktop:dovecot-0:0.99.11-10.EL4.ppc",
"4Desktop:dovecot-0:0.99.11-10.EL4.s390",
"4Desktop:dovecot-0:0.99.11-10.EL4.s390x",
"4Desktop:dovecot-0:0.99.11-10.EL4.src",
"4Desktop:dovecot-0:0.99.11-10.EL4.x86_64",
"4Desktop:dovecot-debuginfo-0:0.99.11-10.EL4.i386",
"4Desktop:dovecot-debuginfo-0:0.99.11-10.EL4.ia64",
"4Desktop:dovecot-debuginfo-0:0.99.11-10.EL4.ppc",
"4Desktop:dovecot-debuginfo-0:0.99.11-10.EL4.s390",
"4Desktop:dovecot-debuginfo-0:0.99.11-10.EL4.s390x",
"4Desktop:dovecot-debuginfo-0:0.99.11-10.EL4.x86_64",
"4ES:dovecot-0:0.99.11-10.EL4.i386",
"4ES:dovecot-0:0.99.11-10.EL4.ia64",
"4ES:dovecot-0:0.99.11-10.EL4.ppc",
"4ES:dovecot-0:0.99.11-10.EL4.s390",
"4ES:dovecot-0:0.99.11-10.EL4.s390x",
"4ES:dovecot-0:0.99.11-10.EL4.src",
"4ES:dovecot-0:0.99.11-10.EL4.x86_64",
"4ES:dovecot-debuginfo-0:0.99.11-10.EL4.i386",
"4ES:dovecot-debuginfo-0:0.99.11-10.EL4.ia64",
"4ES:dovecot-debuginfo-0:0.99.11-10.EL4.ppc",
"4ES:dovecot-debuginfo-0:0.99.11-10.EL4.s390",
"4ES:dovecot-debuginfo-0:0.99.11-10.EL4.s390x",
"4ES:dovecot-debuginfo-0:0.99.11-10.EL4.x86_64",
"4WS:dovecot-0:0.99.11-10.EL4.i386",
"4WS:dovecot-0:0.99.11-10.EL4.ia64",
"4WS:dovecot-0:0.99.11-10.EL4.ppc",
"4WS:dovecot-0:0.99.11-10.EL4.s390",
"4WS:dovecot-0:0.99.11-10.EL4.s390x",
"4WS:dovecot-0:0.99.11-10.EL4.src",
"4WS:dovecot-0:0.99.11-10.EL4.x86_64",
"4WS:dovecot-debuginfo-0:0.99.11-10.EL4.i386",
"4WS:dovecot-debuginfo-0:0.99.11-10.EL4.ia64",
"4WS:dovecot-debuginfo-0:0.99.11-10.EL4.ppc",
"4WS:dovecot-debuginfo-0:0.99.11-10.EL4.s390",
"4WS:dovecot-debuginfo-0:0.99.11-10.EL4.s390x",
"4WS:dovecot-debuginfo-0:0.99.11-10.EL4.x86_64",
"5Client-Workstation-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.i386",
"5Client-Workstation-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.ia64",
"5Client-Workstation-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.ppc",
"5Client-Workstation-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.s390x",
"5Client-Workstation-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.src",
"5Client-Workstation-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.x86_64",
"5Client-Workstation-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.i386",
"5Client-Workstation-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.ia64",
"5Client-Workstation-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.ppc",
"5Client-Workstation-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.s390x",
"5Client-Workstation-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.x86_64",
"5Server-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.i386",
"5Server-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.ia64",
"5Server-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.ppc",
"5Server-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.s390x",
"5Server-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.src",
"5Server-5.7.Z:dovecot-0:1.0.7-7.el5_7.1.x86_64",
"5Server-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.i386",
"5Server-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.ia64",
"5Server-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.ppc",
"5Server-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.s390x",
"5Server-5.7.Z:dovecot-debuginfo-0:1.0.7-7.el5_7.1.x86_64",
"6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.i686",
"6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.ppc",
"6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.ppc64",
"6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.s390",
"6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.s390x",
"6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.src",
"6Server-6.1.z:dovecot-1:2.0.9-2.el6_1.1.x86_64",
"6Server-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.i686",
"6Server-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc",
"6Server-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc64",
"6Server-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390",
"6Server-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390x",
"6Server-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.x86_64",
"6Server-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.i686",
"6Server-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.ppc64",
"6Server-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.s390x",
"6Server-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.x86_64",
"6Server-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.i686",
"6Server-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.ppc64",
"6Server-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.s390x",
"6Server-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.x86_64",
"6Server-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.i686",
"6Server-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.ppc64",
"6Server-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.s390x",
"6Server-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.x86_64",
"6Server-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.i686",
"6Server-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.ppc64",
"6Server-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.s390x",
"6Server-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.x86_64",
"6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.i686",
"6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.ppc",
"6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.ppc64",
"6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.s390",
"6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.s390x",
"6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.src",
"6Server-optional-6.1.z:dovecot-1:2.0.9-2.el6_1.1.x86_64",
"6Server-optional-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.i686",
"6Server-optional-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc",
"6Server-optional-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.ppc64",
"6Server-optional-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390",
"6Server-optional-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.s390x",
"6Server-optional-6.1.z:dovecot-debuginfo-1:2.0.9-2.el6_1.1.x86_64",
"6Server-optional-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.i686",
"6Server-optional-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.ppc64",
"6Server-optional-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.s390x",
"6Server-optional-6.1.z:dovecot-devel-1:2.0.9-2.el6_1.1.x86_64",
"6Server-optional-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.i686",
"6Server-optional-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.ppc64",
"6Server-optional-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.s390x",
"6Server-optional-6.1.z:dovecot-mysql-1:2.0.9-2.el6_1.1.x86_64",
"6Server-optional-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.i686",
"6Server-optional-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.ppc64",
"6Server-optional-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.s390x",
"6Server-optional-6.1.z:dovecot-pgsql-1:2.0.9-2.el6_1.1.x86_64",
"6Server-optional-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.i686",
"6Server-optional-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.ppc64",
"6Server-optional-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.s390x",
"6Server-optional-6.1.z:dovecot-pigeonhole-1:2.0.9-2.el6_1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dovecot: potential crash when parsing header names that contain NUL characters"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.